Oct 2 21:01:29.101374 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 21:01:29.101393 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 21:01:29.101400 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Oct 2 21:01:29.101407 kernel: printk: bootconsole [pl11] enabled Oct 2 21:01:29.101412 kernel: efi: EFI v2.70 by EDK II Oct 2 21:01:29.101417 kernel: efi: ACPI 2.0=0x3fd8d018 SMBIOS=0x3fd6a000 SMBIOS 3.0=0x3fd68000 MEMATTR=0x3ef2fa98 RNG=0x3fd8d998 MEMRESERVE=0x37eb7f98 Oct 2 21:01:29.101424 kernel: random: crng init done Oct 2 21:01:29.101429 kernel: ACPI: Early table checksum verification disabled Oct 2 21:01:29.101434 kernel: ACPI: RSDP 0x000000003FD8D018 000024 (v02 VRTUAL) Oct 2 21:01:29.101440 kernel: ACPI: XSDT 0x000000003FD8DF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:01:29.101445 kernel: ACPI: FACP 0x000000003FD8DC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:01:29.101452 kernel: ACPI: DSDT 0x000000003EBD6018 01DEC0 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 21:01:29.101457 kernel: ACPI: DBG2 0x000000003FD8DB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:01:29.101462 kernel: ACPI: GTDT 0x000000003FD8DD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:01:29.101469 kernel: ACPI: OEM0 0x000000003FD8D098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:01:29.101475 kernel: ACPI: SPCR 0x000000003FD8DA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:01:29.101481 kernel: ACPI: APIC 0x000000003FD8D818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:01:29.101488 kernel: ACPI: SRAT 0x000000003FD8D198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:01:29.101505 kernel: ACPI: PPTT 0x000000003FD8D418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Oct 2 21:01:29.101513 kernel: ACPI: BGRT 0x000000003FD8DE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:01:29.101518 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Oct 2 21:01:29.101524 kernel: NUMA: Failed to initialise from firmware Oct 2 21:01:29.101530 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 21:01:29.101535 kernel: NUMA: NODE_DATA [mem 0x1bf7f0900-0x1bf7f5fff] Oct 2 21:01:29.101541 kernel: Zone ranges: Oct 2 21:01:29.101547 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Oct 2 21:01:29.101552 kernel: DMA32 empty Oct 2 21:01:29.101559 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 21:01:29.101565 kernel: Movable zone start for each node Oct 2 21:01:29.101570 kernel: Early memory node ranges Oct 2 21:01:29.101576 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Oct 2 21:01:29.101581 kernel: node 0: [mem 0x0000000000824000-0x000000003ec84fff] Oct 2 21:01:29.101587 kernel: node 0: [mem 0x000000003ec85000-0x000000003ecadfff] Oct 2 21:01:29.101593 kernel: node 0: [mem 0x000000003ecae000-0x000000003fd2dfff] Oct 2 21:01:29.101598 kernel: node 0: [mem 0x000000003fd2e000-0x000000003fd81fff] Oct 2 21:01:29.101604 kernel: node 0: [mem 0x000000003fd82000-0x000000003fd8dfff] Oct 2 21:01:29.101609 kernel: node 0: [mem 0x000000003fd8e000-0x000000003fd91fff] Oct 2 21:01:29.101615 kernel: node 0: [mem 0x000000003fd92000-0x000000003fffffff] Oct 2 21:01:29.101621 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 21:01:29.101628 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 21:01:29.101636 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Oct 2 21:01:29.101642 kernel: psci: probing for conduit method from ACPI. Oct 2 21:01:29.101648 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 21:01:29.101654 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 21:01:29.101661 kernel: psci: MIGRATE_INFO_TYPE not supported. Oct 2 21:01:29.101667 kernel: psci: SMC Calling Convention v1.4 Oct 2 21:01:29.101673 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Oct 2 21:01:29.101679 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Oct 2 21:01:29.101685 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 21:01:29.101691 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 21:01:29.101697 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 21:01:29.101703 kernel: Detected PIPT I-cache on CPU0 Oct 2 21:01:29.101709 kernel: CPU features: detected: GIC system register CPU interface Oct 2 21:01:29.101715 kernel: CPU features: detected: Hardware dirty bit management Oct 2 21:01:29.101721 kernel: CPU features: detected: Spectre-BHB Oct 2 21:01:29.101727 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 21:01:29.101735 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 21:01:29.101740 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 21:01:29.101746 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Oct 2 21:01:29.101752 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Oct 2 21:01:29.101758 kernel: Policy zone: Normal Oct 2 21:01:29.101765 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 21:01:29.101772 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 21:01:29.101778 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 21:01:29.101784 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 21:01:29.101790 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 21:01:29.101797 kernel: software IO TLB: mapped [mem 0x000000003abd6000-0x000000003ebd6000] (64MB) Oct 2 21:01:29.101804 kernel: Memory: 3992056K/4194160K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 202104K reserved, 0K cma-reserved) Oct 2 21:01:29.101810 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 21:01:29.101816 kernel: trace event string verifier disabled Oct 2 21:01:29.101822 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 21:01:29.101828 kernel: rcu: RCU event tracing is enabled. Oct 2 21:01:29.101834 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 21:01:29.101840 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 21:01:29.101846 kernel: Tracing variant of Tasks RCU enabled. Oct 2 21:01:29.101852 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 21:01:29.101858 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 21:01:29.101865 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 21:01:29.101871 kernel: GICv3: 960 SPIs implemented Oct 2 21:01:29.101877 kernel: GICv3: 0 Extended SPIs implemented Oct 2 21:01:29.101883 kernel: GICv3: Distributor has no Range Selector support Oct 2 21:01:29.101889 kernel: Root IRQ handler: gic_handle_irq Oct 2 21:01:29.101895 kernel: GICv3: 16 PPIs implemented Oct 2 21:01:29.101901 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Oct 2 21:01:29.101907 kernel: ITS: No ITS available, not enabling LPIs Oct 2 21:01:29.101913 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 21:01:29.101919 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 21:01:29.101925 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 21:01:29.101932 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 21:01:29.101939 kernel: Console: colour dummy device 80x25 Oct 2 21:01:29.101945 kernel: printk: console [tty1] enabled Oct 2 21:01:29.101952 kernel: ACPI: Core revision 20210730 Oct 2 21:01:29.101958 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 21:01:29.101964 kernel: pid_max: default: 32768 minimum: 301 Oct 2 21:01:29.101970 kernel: LSM: Security Framework initializing Oct 2 21:01:29.101976 kernel: SELinux: Initializing. Oct 2 21:01:29.101983 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 21:01:29.101989 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 21:01:29.101997 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Oct 2 21:01:29.102003 kernel: Hyper-V: Host Build 10.0.22477.1341-1-0 Oct 2 21:01:29.102009 kernel: rcu: Hierarchical SRCU implementation. Oct 2 21:01:29.102015 kernel: Remapping and enabling EFI services. Oct 2 21:01:29.102021 kernel: smp: Bringing up secondary CPUs ... Oct 2 21:01:29.102027 kernel: Detected PIPT I-cache on CPU1 Oct 2 21:01:29.102034 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Oct 2 21:01:29.102040 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 21:01:29.102046 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 21:01:29.102054 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 21:01:29.102060 kernel: SMP: Total of 2 processors activated. Oct 2 21:01:29.102066 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 21:01:29.102073 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Oct 2 21:01:29.102079 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 21:01:29.102085 kernel: CPU features: detected: CRC32 instructions Oct 2 21:01:29.102091 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 21:01:29.102098 kernel: CPU features: detected: LSE atomic instructions Oct 2 21:01:29.102104 kernel: CPU features: detected: Privileged Access Never Oct 2 21:01:29.102111 kernel: CPU: All CPU(s) started at EL1 Oct 2 21:01:29.102117 kernel: alternatives: patching kernel code Oct 2 21:01:29.102128 kernel: devtmpfs: initialized Oct 2 21:01:29.102136 kernel: KASLR enabled Oct 2 21:01:29.102142 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 21:01:29.102149 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 21:01:29.102155 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 21:01:29.102162 kernel: SMBIOS 3.1.0 present. Oct 2 21:01:29.102168 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/16/2022 Oct 2 21:01:29.102175 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 21:01:29.102183 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 21:01:29.102190 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 21:01:29.102196 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 21:01:29.102203 kernel: audit: initializing netlink subsys (disabled) Oct 2 21:01:29.102209 kernel: audit: type=2000 audit(0.086:1): state=initialized audit_enabled=0 res=1 Oct 2 21:01:29.102216 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 21:01:29.102222 kernel: cpuidle: using governor menu Oct 2 21:01:29.102230 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 21:01:29.102237 kernel: ASID allocator initialised with 32768 entries Oct 2 21:01:29.102243 kernel: ACPI: bus type PCI registered Oct 2 21:01:29.102250 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 21:01:29.102257 kernel: Serial: AMBA PL011 UART driver Oct 2 21:01:29.102263 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 21:01:29.102270 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 21:01:29.102276 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 21:01:29.102283 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 21:01:29.102290 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 21:01:29.102297 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 21:01:29.102304 kernel: ACPI: Added _OSI(Module Device) Oct 2 21:01:29.102310 kernel: ACPI: Added _OSI(Processor Device) Oct 2 21:01:29.102316 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 21:01:29.102323 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 21:01:29.102329 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 21:01:29.102336 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 21:01:29.102342 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 21:01:29.102350 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 21:01:29.102357 kernel: ACPI: Interpreter enabled Oct 2 21:01:29.102363 kernel: ACPI: Using GIC for interrupt routing Oct 2 21:01:29.102370 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Oct 2 21:01:29.102377 kernel: printk: console [ttyAMA0] enabled Oct 2 21:01:29.102383 kernel: printk: bootconsole [pl11] disabled Oct 2 21:01:29.102390 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Oct 2 21:01:29.102396 kernel: iommu: Default domain type: Translated Oct 2 21:01:29.102403 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 21:01:29.102411 kernel: vgaarb: loaded Oct 2 21:01:29.102417 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 21:01:29.102424 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 21:01:29.102430 kernel: PTP clock support registered Oct 2 21:01:29.102437 kernel: Registered efivars operations Oct 2 21:01:29.102443 kernel: No ACPI PMU IRQ for CPU0 Oct 2 21:01:29.102449 kernel: No ACPI PMU IRQ for CPU1 Oct 2 21:01:29.102456 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 21:01:29.102462 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 21:01:29.102470 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 21:01:29.102477 kernel: pnp: PnP ACPI init Oct 2 21:01:29.102483 kernel: pnp: PnP ACPI: found 0 devices Oct 2 21:01:29.102490 kernel: NET: Registered PF_INET protocol family Oct 2 21:01:29.102504 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 21:01:29.102512 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 21:01:29.102518 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 21:01:29.102525 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 21:01:29.102532 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 21:01:29.102540 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 21:01:29.102546 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 21:01:29.102553 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 21:01:29.102559 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 21:01:29.102566 kernel: PCI: CLS 0 bytes, default 64 Oct 2 21:01:29.102572 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Oct 2 21:01:29.102579 kernel: kvm [1]: HYP mode not available Oct 2 21:01:29.102585 kernel: Initialise system trusted keyrings Oct 2 21:01:29.102592 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 21:01:29.102600 kernel: Key type asymmetric registered Oct 2 21:01:29.102606 kernel: Asymmetric key parser 'x509' registered Oct 2 21:01:29.102613 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 21:01:29.102619 kernel: io scheduler mq-deadline registered Oct 2 21:01:29.102626 kernel: io scheduler kyber registered Oct 2 21:01:29.102633 kernel: io scheduler bfq registered Oct 2 21:01:29.102639 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 21:01:29.102646 kernel: thunder_xcv, ver 1.0 Oct 2 21:01:29.102652 kernel: thunder_bgx, ver 1.0 Oct 2 21:01:29.102660 kernel: nicpf, ver 1.0 Oct 2 21:01:29.102666 kernel: nicvf, ver 1.0 Oct 2 21:01:29.102829 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 21:01:29.102890 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T21:01:28 UTC (1696280488) Oct 2 21:01:29.102899 kernel: efifb: probing for efifb Oct 2 21:01:29.102906 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 21:01:29.102913 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 21:01:29.102919 kernel: efifb: scrolling: redraw Oct 2 21:01:29.102927 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 21:01:29.102934 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 21:01:29.102941 kernel: fb0: EFI VGA frame buffer device Oct 2 21:01:29.102947 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Oct 2 21:01:29.102954 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 21:01:29.102960 kernel: NET: Registered PF_INET6 protocol family Oct 2 21:01:29.102967 kernel: Segment Routing with IPv6 Oct 2 21:01:29.102974 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 21:01:29.102980 kernel: NET: Registered PF_PACKET protocol family Oct 2 21:01:29.102988 kernel: Key type dns_resolver registered Oct 2 21:01:29.102994 kernel: registered taskstats version 1 Oct 2 21:01:29.103001 kernel: Loading compiled-in X.509 certificates Oct 2 21:01:29.103008 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 21:01:29.103014 kernel: Key type .fscrypt registered Oct 2 21:01:29.103020 kernel: Key type fscrypt-provisioning registered Oct 2 21:01:29.103027 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 21:01:29.103033 kernel: ima: Allocated hash algorithm: sha1 Oct 2 21:01:29.103040 kernel: ima: No architecture policies found Oct 2 21:01:29.103047 kernel: Freeing unused kernel memory: 34560K Oct 2 21:01:29.103054 kernel: Run /init as init process Oct 2 21:01:29.103060 kernel: with arguments: Oct 2 21:01:29.103067 kernel: /init Oct 2 21:01:29.103073 kernel: with environment: Oct 2 21:01:29.103079 kernel: HOME=/ Oct 2 21:01:29.103086 kernel: TERM=linux Oct 2 21:01:29.103092 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 21:01:29.103100 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 21:01:29.103110 systemd[1]: Detected virtualization microsoft. Oct 2 21:01:29.103118 systemd[1]: Detected architecture arm64. Oct 2 21:01:29.103124 systemd[1]: Running in initrd. Oct 2 21:01:29.103131 systemd[1]: No hostname configured, using default hostname. Oct 2 21:01:29.103138 systemd[1]: Hostname set to . Oct 2 21:01:29.103146 systemd[1]: Initializing machine ID from random generator. Oct 2 21:01:29.103152 systemd[1]: Queued start job for default target initrd.target. Oct 2 21:01:29.103161 systemd[1]: Started systemd-ask-password-console.path. Oct 2 21:01:29.103167 systemd[1]: Reached target cryptsetup.target. Oct 2 21:01:29.103174 systemd[1]: Reached target paths.target. Oct 2 21:01:29.103181 systemd[1]: Reached target slices.target. Oct 2 21:01:29.103188 systemd[1]: Reached target swap.target. Oct 2 21:01:29.103195 systemd[1]: Reached target timers.target. Oct 2 21:01:29.103202 systemd[1]: Listening on iscsid.socket. Oct 2 21:01:29.103209 systemd[1]: Listening on iscsiuio.socket. Oct 2 21:01:29.103218 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 21:01:29.103225 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 21:01:29.103232 systemd[1]: Listening on systemd-journald.socket. Oct 2 21:01:29.103239 systemd[1]: Listening on systemd-networkd.socket. Oct 2 21:01:29.103246 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 21:01:29.103253 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 21:01:29.103260 systemd[1]: Reached target sockets.target. Oct 2 21:01:29.103267 systemd[1]: Starting kmod-static-nodes.service... Oct 2 21:01:29.103274 systemd[1]: Finished network-cleanup.service. Oct 2 21:01:29.103283 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 21:01:29.103290 systemd[1]: Starting systemd-journald.service... Oct 2 21:01:29.103297 systemd[1]: Starting systemd-modules-load.service... Oct 2 21:01:29.103303 systemd[1]: Starting systemd-resolved.service... Oct 2 21:01:29.103310 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 21:01:29.103320 systemd-journald[276]: Journal started Oct 2 21:01:29.103357 systemd-journald[276]: Runtime Journal (/run/log/journal/df1b43a4d5b7404a96c9d66f235aaf56) is 8.0M, max 78.6M, 70.6M free. Oct 2 21:01:29.093723 systemd-modules-load[277]: Inserted module 'overlay' Oct 2 21:01:29.128591 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 21:01:29.148771 systemd[1]: Started systemd-journald.service. Oct 2 21:01:29.148829 kernel: Bridge firewalling registered Oct 2 21:01:29.148870 systemd-modules-load[277]: Inserted module 'br_netfilter' Oct 2 21:01:29.151036 systemd-resolved[278]: Positive Trust Anchors: Oct 2 21:01:29.151043 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 21:01:29.170000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.151071 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 21:01:29.264028 kernel: audit: type=1130 audit(1696280489.170:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.264051 kernel: audit: type=1130 audit(1696280489.192:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.264060 kernel: SCSI subsystem initialized Oct 2 21:01:29.264069 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 21:01:29.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.154048 systemd-resolved[278]: Defaulting to hostname 'linux'. Oct 2 21:01:29.295010 kernel: audit: type=1130 audit(1696280489.268:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.295028 kernel: device-mapper: uevent: version 1.0.3 Oct 2 21:01:29.268000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.171258 systemd[1]: Started systemd-resolved.service. Oct 2 21:01:29.327344 kernel: audit: type=1130 audit(1696280489.299:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.327370 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 21:01:29.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.193414 systemd[1]: Finished kmod-static-nodes.service. Oct 2 21:01:29.355340 kernel: audit: type=1130 audit(1696280489.332:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.269022 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 21:01:29.299908 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 21:01:29.333197 systemd[1]: Reached target nss-lookup.target. Oct 2 21:01:29.364799 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 21:01:29.364914 systemd-modules-load[277]: Inserted module 'dm_multipath' Oct 2 21:01:29.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.380837 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 21:01:29.432569 kernel: audit: type=1130 audit(1696280489.407:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.397542 systemd[1]: Finished systemd-modules-load.service. Oct 2 21:01:29.491184 kernel: audit: type=1130 audit(1696280489.437:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.491207 kernel: audit: type=1130 audit(1696280489.463:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.463000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.408217 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 21:01:29.438434 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 21:01:29.481623 systemd[1]: Starting dracut-cmdline.service... Oct 2 21:01:29.512072 dracut-cmdline[295]: dracut-dracut-053 Oct 2 21:01:29.496996 systemd[1]: Starting systemd-sysctl.service... Oct 2 21:01:29.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.545348 dracut-cmdline[295]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 21:01:29.580901 kernel: audit: type=1130 audit(1696280489.528:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.523743 systemd[1]: Finished systemd-sysctl.service. Oct 2 21:01:29.656515 kernel: Loading iSCSI transport class v2.0-870. Oct 2 21:01:29.667513 kernel: iscsi: registered transport (tcp) Oct 2 21:01:29.688039 kernel: iscsi: registered transport (qla4xxx) Oct 2 21:01:29.688089 kernel: QLogic iSCSI HBA Driver Oct 2 21:01:29.761312 systemd[1]: Finished dracut-cmdline.service. Oct 2 21:01:29.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:29.766994 systemd[1]: Starting dracut-pre-udev.service... Oct 2 21:01:29.833532 kernel: raid6: neonx8 gen() 13820 MB/s Oct 2 21:01:29.851505 kernel: raid6: neonx8 xor() 10835 MB/s Oct 2 21:01:29.871509 kernel: raid6: neonx4 gen() 13530 MB/s Oct 2 21:01:29.892510 kernel: raid6: neonx4 xor() 11244 MB/s Oct 2 21:01:29.913503 kernel: raid6: neonx2 gen() 12982 MB/s Oct 2 21:01:29.934505 kernel: raid6: neonx2 xor() 10318 MB/s Oct 2 21:01:29.956505 kernel: raid6: neonx1 gen() 10520 MB/s Oct 2 21:01:29.976506 kernel: raid6: neonx1 xor() 8804 MB/s Oct 2 21:01:29.996503 kernel: raid6: int64x8 gen() 6297 MB/s Oct 2 21:01:30.017509 kernel: raid6: int64x8 xor() 3551 MB/s Oct 2 21:01:30.038507 kernel: raid6: int64x4 gen() 7256 MB/s Oct 2 21:01:30.058509 kernel: raid6: int64x4 xor() 3856 MB/s Oct 2 21:01:30.079509 kernel: raid6: int64x2 gen() 6153 MB/s Oct 2 21:01:30.100510 kernel: raid6: int64x2 xor() 3324 MB/s Oct 2 21:01:30.120503 kernel: raid6: int64x1 gen() 5043 MB/s Oct 2 21:01:30.146399 kernel: raid6: int64x1 xor() 2646 MB/s Oct 2 21:01:30.146419 kernel: raid6: using algorithm neonx8 gen() 13820 MB/s Oct 2 21:01:30.146435 kernel: raid6: .... xor() 10835 MB/s, rmw enabled Oct 2 21:01:30.150860 kernel: raid6: using neon recovery algorithm Oct 2 21:01:30.168506 kernel: xor: measuring software checksum speed Oct 2 21:01:30.172503 kernel: 8regs : 17308 MB/sec Oct 2 21:01:30.181260 kernel: 32regs : 20765 MB/sec Oct 2 21:01:30.181270 kernel: arm64_neon : 27882 MB/sec Oct 2 21:01:30.181278 kernel: xor: using function: arm64_neon (27882 MB/sec) Oct 2 21:01:30.241511 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 21:01:30.258378 systemd[1]: Finished dracut-pre-udev.service. Oct 2 21:01:30.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:30.266000 audit: BPF prog-id=7 op=LOAD Oct 2 21:01:30.266000 audit: BPF prog-id=8 op=LOAD Oct 2 21:01:30.267601 systemd[1]: Starting systemd-udevd.service... Oct 2 21:01:30.288421 systemd-udevd[474]: Using default interface naming scheme 'v252'. Oct 2 21:01:30.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:30.293952 systemd[1]: Started systemd-udevd.service. Oct 2 21:01:30.299466 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 21:01:30.333465 dracut-pre-trigger[496]: rd.md=0: removing MD RAID activation Oct 2 21:01:30.381936 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 21:01:30.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:30.387885 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 21:01:30.431085 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 21:01:30.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:30.499514 kernel: hv_vmbus: Vmbus version:5.3 Oct 2 21:01:30.517880 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 21:01:30.517936 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 21:01:30.517946 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 21:01:30.518519 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 21:01:30.533436 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 21:01:30.540510 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 21:01:30.541516 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 21:01:30.563518 kernel: scsi host0: storvsc_host_t Oct 2 21:01:30.563664 kernel: scsi host1: storvsc_host_t Oct 2 21:01:30.577840 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 21:01:30.577888 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 21:01:30.597841 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 21:01:30.598014 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 21:01:30.599534 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 21:01:30.618078 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 21:01:30.618304 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 21:01:30.622685 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 21:01:30.629882 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 21:01:30.630012 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 21:01:30.637507 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 21:01:30.645294 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 21:01:30.672296 kernel: hv_netvsc 00224878-1828-0022-4878-182800224878 eth0: VF slot 1 added Oct 2 21:01:30.687798 kernel: hv_vmbus: registering driver hv_pci Oct 2 21:01:30.687846 kernel: hv_pci 972b9a45-6097-4981-9ae1-04e6cfcb2655: PCI VMBus probing: Using version 0x10004 Oct 2 21:01:30.704854 kernel: hv_pci 972b9a45-6097-4981-9ae1-04e6cfcb2655: PCI host bridge to bus 6097:00 Oct 2 21:01:30.704993 kernel: pci_bus 6097:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Oct 2 21:01:30.705090 kernel: pci_bus 6097:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 21:01:30.720068 kernel: pci 6097:00:02.0: [15b3:1018] type 00 class 0x020000 Oct 2 21:01:30.732190 kernel: pci 6097:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 21:01:30.752863 kernel: pci 6097:00:02.0: enabling Extended Tags Oct 2 21:01:30.923615 kernel: pci 6097:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 6097:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Oct 2 21:01:30.937627 kernel: pci_bus 6097:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 21:01:30.937822 kernel: pci 6097:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 21:01:30.977521 kernel: mlx5_core 6097:00:02.0: firmware version: 16.31.2424 Oct 2 21:01:31.144520 kernel: mlx5_core 6097:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Oct 2 21:01:31.185328 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 21:01:31.219533 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (533) Oct 2 21:01:31.237579 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 21:01:31.290323 kernel: hv_netvsc 00224878-1828-0022-4878-182800224878 eth0: VF registering: eth1 Oct 2 21:01:31.290526 kernel: mlx5_core 6097:00:02.0 eth1: joined to eth0 Oct 2 21:01:31.304538 kernel: mlx5_core 6097:00:02.0 enP24727s1: renamed from eth1 Oct 2 21:01:31.395068 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 21:01:31.458646 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 21:01:31.464838 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 21:01:31.477781 systemd[1]: Starting disk-uuid.service... Oct 2 21:01:32.513983 disk-uuid[600]: The operation has completed successfully. Oct 2 21:01:32.520466 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 21:01:32.588601 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 21:01:32.593637 systemd[1]: Finished disk-uuid.service. Oct 2 21:01:32.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:32.597000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:32.603102 systemd[1]: Starting verity-setup.service... Oct 2 21:01:32.650525 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 21:01:32.843717 systemd[1]: Found device dev-mapper-usr.device. Oct 2 21:01:32.853744 systemd[1]: Finished verity-setup.service. Oct 2 21:01:32.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:32.859139 systemd[1]: Mounting sysusr-usr.mount... Oct 2 21:01:32.920526 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 21:01:32.921135 systemd[1]: Mounted sysusr-usr.mount. Oct 2 21:01:32.925546 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 21:01:32.926234 systemd[1]: Starting ignition-setup.service... Oct 2 21:01:32.933805 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 21:01:32.978123 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 21:01:32.978176 kernel: BTRFS info (device sda6): using free space tree Oct 2 21:01:32.983110 kernel: BTRFS info (device sda6): has skinny extents Oct 2 21:01:33.073473 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 21:01:33.092406 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 21:01:33.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:33.111166 kernel: kauditd_printk_skb: 10 callbacks suppressed Oct 2 21:01:33.111209 kernel: audit: type=1130 audit(1696280493.097:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:33.108475 systemd[1]: Starting systemd-networkd.service... Oct 2 21:01:33.141323 kernel: audit: type=1334 audit(1696280493.107:22): prog-id=9 op=LOAD Oct 2 21:01:33.107000 audit: BPF prog-id=9 op=LOAD Oct 2 21:01:33.157130 systemd-networkd[878]: lo: Link UP Oct 2 21:01:33.157141 systemd-networkd[878]: lo: Gained carrier Oct 2 21:01:33.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:33.157549 systemd-networkd[878]: Enumeration completed Oct 2 21:01:33.195885 kernel: audit: type=1130 audit(1696280493.166:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:33.158263 systemd-networkd[878]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 21:01:33.161037 systemd[1]: Started systemd-networkd.service. Oct 2 21:01:33.184231 systemd[1]: Reached target network.target. Oct 2 21:01:33.248893 kernel: audit: type=1130 audit(1696280493.220:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:33.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:33.195186 systemd[1]: Starting iscsiuio.service... Oct 2 21:01:33.253083 iscsid[883]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 21:01:33.253083 iscsid[883]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 21:01:33.253083 iscsid[883]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 21:01:33.253083 iscsid[883]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 21:01:33.253083 iscsid[883]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 21:01:33.253083 iscsid[883]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 21:01:33.253083 iscsid[883]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 21:01:33.423271 kernel: audit: type=1130 audit(1696280493.256:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:33.423303 kernel: audit: type=1130 audit(1696280493.312:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:33.423313 kernel: audit: type=1130 audit(1696280493.399:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:33.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:33.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:33.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:33.208135 systemd[1]: Started iscsiuio.service. Oct 2 21:01:33.434252 kernel: mlx5_core 6097:00:02.0 enP24727s1: Link up Oct 2 21:01:33.222421 systemd[1]: Starting iscsid.service... Oct 2 21:01:33.460327 kernel: audit: type=1130 audit(1696280493.438:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:33.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:33.249085 systemd[1]: Started iscsid.service. Oct 2 21:01:33.281665 systemd[1]: Starting dracut-initqueue.service... Oct 2 21:01:33.301058 systemd[1]: Finished dracut-initqueue.service. Oct 2 21:01:33.331336 systemd[1]: Reached target remote-fs-pre.target. Oct 2 21:01:33.348377 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 21:01:33.360340 systemd[1]: Reached target remote-fs.target. Oct 2 21:01:33.369862 systemd[1]: Starting dracut-pre-mount.service... Oct 2 21:01:33.394621 systemd[1]: Finished ignition-setup.service. Oct 2 21:01:33.425635 systemd[1]: Finished dracut-pre-mount.service. Oct 2 21:01:33.465126 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 21:01:33.529284 kernel: hv_netvsc 00224878-1828-0022-4878-182800224878 eth0: Data path switched to VF: enP24727s1 Oct 2 21:01:33.529464 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 21:01:33.529716 systemd-networkd[878]: enP24727s1: Link UP Oct 2 21:01:33.529798 systemd-networkd[878]: eth0: Link UP Oct 2 21:01:33.529917 systemd-networkd[878]: eth0: Gained carrier Oct 2 21:01:33.542695 systemd-networkd[878]: enP24727s1: Gained carrier Oct 2 21:01:33.550573 systemd-networkd[878]: eth0: DHCPv4 address 10.200.20.10/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 21:01:35.471628 systemd-networkd[878]: eth0: Gained IPv6LL Oct 2 21:01:36.836025 ignition[898]: Ignition 2.14.0 Oct 2 21:01:36.836037 ignition[898]: Stage: fetch-offline Oct 2 21:01:36.836126 ignition[898]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:01:36.836163 ignition[898]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:01:36.931872 ignition[898]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:01:36.932009 ignition[898]: parsed url from cmdline: "" Oct 2 21:01:36.932012 ignition[898]: no config URL provided Oct 2 21:01:36.932017 ignition[898]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 21:01:36.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:36.947017 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 21:01:36.988831 kernel: audit: type=1130 audit(1696280496.955:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:36.932025 ignition[898]: no config at "/usr/lib/ignition/user.ign" Oct 2 21:01:36.957072 systemd[1]: Starting ignition-fetch.service... Oct 2 21:01:36.932030 ignition[898]: failed to fetch config: resource requires networking Oct 2 21:01:36.938292 ignition[898]: Ignition finished successfully Oct 2 21:01:36.975569 ignition[905]: Ignition 2.14.0 Oct 2 21:01:36.975576 ignition[905]: Stage: fetch Oct 2 21:01:36.975681 ignition[905]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:01:36.975703 ignition[905]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:01:36.978540 ignition[905]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:01:36.978669 ignition[905]: parsed url from cmdline: "" Oct 2 21:01:36.978672 ignition[905]: no config URL provided Oct 2 21:01:36.978677 ignition[905]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 21:01:36.978685 ignition[905]: no config at "/usr/lib/ignition/user.ign" Oct 2 21:01:36.978723 ignition[905]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 21:01:37.009436 ignition[905]: GET result: OK Oct 2 21:01:37.009462 ignition[905]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 21:01:37.072772 ignition[905]: opening config device: "/dev/sr0" Oct 2 21:01:37.073106 ignition[905]: getting drive status for "/dev/sr0" Oct 2 21:01:37.073147 ignition[905]: drive status: OK Oct 2 21:01:37.073198 ignition[905]: mounting config device Oct 2 21:01:37.073206 ignition[905]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure1198736782" Oct 2 21:01:37.101522 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 21:01:37.102658 systemd[1]: tmp-ignition\x2dazure1198736782.mount: Deactivated successfully. Oct 2 21:01:37.101594 ignition[905]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure1198736782" Oct 2 21:01:37.101599 ignition[905]: checking for config drive Oct 2 21:01:37.101879 ignition[905]: reading config Oct 2 21:01:37.102220 ignition[905]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure1198736782" Oct 2 21:01:37.102312 ignition[905]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure1198736782" Oct 2 21:01:37.102325 ignition[905]: config has been read from custom data Oct 2 21:01:37.102404 ignition[905]: parsing config with SHA512: 8f31d493514ed634f0783d010740ca8c788147b4f3a38548f5dde12e3451dbce0e82a437023e4aeba94bc3cf0522f2a48a06aa88b6775d8ec4e6f00460137d10 Oct 2 21:01:37.149995 unknown[905]: fetched base config from "system" Oct 2 21:01:37.150007 unknown[905]: fetched base config from "system" Oct 2 21:01:37.154900 ignition[905]: fetch: fetch complete Oct 2 21:01:37.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:37.187513 kernel: audit: type=1130 audit(1696280497.164:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:37.150013 unknown[905]: fetched user config from "azure" Oct 2 21:01:37.154906 ignition[905]: fetch: fetch passed Oct 2 21:01:37.160058 systemd[1]: Finished ignition-fetch.service. Oct 2 21:01:37.154961 ignition[905]: Ignition finished successfully Oct 2 21:01:37.166128 systemd[1]: Starting ignition-kargs.service... Oct 2 21:01:37.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:37.205005 ignition[913]: Ignition 2.14.0 Oct 2 21:01:37.211836 systemd[1]: Finished ignition-kargs.service. Oct 2 21:01:37.205011 ignition[913]: Stage: kargs Oct 2 21:01:37.217461 systemd[1]: Starting ignition-disks.service... Oct 2 21:01:37.205119 ignition[913]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:01:37.205142 ignition[913]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:01:37.208792 ignition[913]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:01:37.210468 ignition[913]: kargs: kargs passed Oct 2 21:01:37.210532 ignition[913]: Ignition finished successfully Oct 2 21:01:37.261805 systemd[1]: Finished ignition-disks.service. Oct 2 21:01:37.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:37.238234 ignition[919]: Ignition 2.14.0 Oct 2 21:01:37.270728 systemd[1]: Reached target initrd-root-device.target. Oct 2 21:01:37.238240 ignition[919]: Stage: disks Oct 2 21:01:37.279891 systemd[1]: Reached target local-fs-pre.target. Oct 2 21:01:37.238343 ignition[919]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:01:37.287815 systemd[1]: Reached target local-fs.target. Oct 2 21:01:37.238368 ignition[919]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:01:37.297107 systemd[1]: Reached target sysinit.target. Oct 2 21:01:37.258860 ignition[919]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:01:37.304626 systemd[1]: Reached target basic.target. Oct 2 21:01:37.260204 ignition[919]: disks: disks passed Oct 2 21:01:37.314194 systemd[1]: Starting systemd-fsck-root.service... Oct 2 21:01:37.260249 ignition[919]: Ignition finished successfully Oct 2 21:01:37.403785 systemd-fsck[927]: ROOT: clean, 603/7326000 files, 481067/7359488 blocks Oct 2 21:01:37.413790 systemd[1]: Finished systemd-fsck-root.service. Oct 2 21:01:37.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:37.419645 systemd[1]: Mounting sysroot.mount... Oct 2 21:01:37.449523 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 21:01:37.450067 systemd[1]: Mounted sysroot.mount. Oct 2 21:01:37.454158 systemd[1]: Reached target initrd-root-fs.target. Oct 2 21:01:37.491385 systemd[1]: Mounting sysroot-usr.mount... Oct 2 21:01:37.496356 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 21:01:37.505791 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 21:01:37.505824 systemd[1]: Reached target ignition-diskful.target. Oct 2 21:01:37.512013 systemd[1]: Mounted sysroot-usr.mount. Oct 2 21:01:37.554691 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 21:01:37.560239 systemd[1]: Starting initrd-setup-root.service... Oct 2 21:01:37.587532 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (937) Oct 2 21:01:37.600745 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 21:01:37.600786 kernel: BTRFS info (device sda6): using free space tree Oct 2 21:01:37.600797 initrd-setup-root[942]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 21:01:37.613347 kernel: BTRFS info (device sda6): has skinny extents Oct 2 21:01:37.617143 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 21:01:37.644474 initrd-setup-root[968]: cut: /sysroot/etc/group: No such file or directory Oct 2 21:01:37.657286 initrd-setup-root[976]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 21:01:37.669842 initrd-setup-root[984]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 21:01:38.113170 systemd[1]: Finished initrd-setup-root.service. Oct 2 21:01:38.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:38.135515 kernel: kauditd_printk_skb: 3 callbacks suppressed Oct 2 21:01:38.135564 kernel: audit: type=1130 audit(1696280498.118:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:38.128053 systemd[1]: Starting ignition-mount.service... Oct 2 21:01:38.155116 systemd[1]: Starting sysroot-boot.service... Oct 2 21:01:38.160207 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 21:01:38.160306 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 21:01:38.190034 systemd[1]: Finished sysroot-boot.service. Oct 2 21:01:38.199052 ignition[1005]: INFO : Ignition 2.14.0 Oct 2 21:01:38.199052 ignition[1005]: INFO : Stage: mount Oct 2 21:01:38.199052 ignition[1005]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:01:38.199052 ignition[1005]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:01:38.274717 kernel: audit: type=1130 audit(1696280498.203:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:38.274741 kernel: audit: type=1130 audit(1696280498.235:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:38.203000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:38.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:38.204732 systemd[1]: Finished ignition-mount.service. Oct 2 21:01:38.279199 ignition[1005]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:01:38.279199 ignition[1005]: INFO : mount: mount passed Oct 2 21:01:38.279199 ignition[1005]: INFO : Ignition finished successfully Oct 2 21:01:38.836455 coreos-metadata[936]: Oct 02 21:01:38.836 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 21:01:38.847254 coreos-metadata[936]: Oct 02 21:01:38.847 INFO Fetch successful Oct 2 21:01:38.880764 coreos-metadata[936]: Oct 02 21:01:38.880 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 21:01:38.894630 coreos-metadata[936]: Oct 02 21:01:38.891 INFO Fetch successful Oct 2 21:01:38.894630 coreos-metadata[936]: Oct 02 21:01:38.893 INFO wrote hostname ci-3510.3.0-a-4ade0e9e10 to /sysroot/etc/hostname Oct 2 21:01:38.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:38.896352 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 21:01:38.943009 kernel: audit: type=1130 audit(1696280498.905:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:38.933469 systemd[1]: Starting ignition-files.service... Oct 2 21:01:38.950166 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 21:01:38.969700 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (1015) Oct 2 21:01:38.983104 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 21:01:38.983134 kernel: BTRFS info (device sda6): using free space tree Oct 2 21:01:38.988111 kernel: BTRFS info (device sda6): has skinny extents Oct 2 21:01:38.992439 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 21:01:39.013200 ignition[1034]: INFO : Ignition 2.14.0 Oct 2 21:01:39.013200 ignition[1034]: INFO : Stage: files Oct 2 21:01:39.024639 ignition[1034]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:01:39.024639 ignition[1034]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:01:39.024639 ignition[1034]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:01:39.024639 ignition[1034]: DEBUG : files: compiled without relabeling support, skipping Oct 2 21:01:39.060585 ignition[1034]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 21:01:39.060585 ignition[1034]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 21:01:39.118848 ignition[1034]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 21:01:39.129067 ignition[1034]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 21:01:39.144651 unknown[1034]: wrote ssh authorized keys file for user: core Oct 2 21:01:39.153582 ignition[1034]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 21:01:39.165472 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 21:01:39.165472 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 21:01:40.473074 kernel: mlx5_core 6097:00:02.0: poll_health:739:(pid 0): device's health compromised - reached miss count Oct 2 21:01:44.463864 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 21:01:44.741990 ignition[1034]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 21:01:44.760550 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 21:01:44.760550 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 21:01:44.760550 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 21:01:44.971819 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 21:01:45.114473 ignition[1034]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 21:01:45.132133 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 21:01:45.132133 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 21:01:45.132133 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubeadm: attempt #1 Oct 2 21:01:45.205569 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 21:01:46.228247 ignition[1034]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 5a08b81f9cc82d3cce21130856ca63b8dafca9149d9775dd25b376eb0f18209aa0e4a47c0a6d7e6fb1316aacd5d59dec770f26c09120c866949d70bc415518b3 Oct 2 21:01:46.244786 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 21:01:46.244786 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 21:01:46.244786 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubelet: attempt #1 Oct 2 21:01:46.300609 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 21:01:47.060011 ignition[1034]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 5a898ef543a6482895101ea58e33602e3c0a7682d322aaf08ac3dc8a5a3c8da8f09600d577024549288f8cebb1a86f9c79927796b69a3d8fe989ca8f12b147d6 Oct 2 21:01:47.080678 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 21:01:47.080678 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 21:01:47.080678 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/arm64/kubectl: attempt #1 Oct 2 21:01:47.133060 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 21:01:47.498925 ignition[1034]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 6a5c9c02a29126949f096415bb1761a0c0ad44168e2ab3d0409982701da58f96223bec354828ddf958e945ef1ce63c0ad41e77cbcbcce0756163e71b4fbae432 Oct 2 21:01:47.515006 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 21:01:47.515006 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 21:01:47.515006 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 21:01:47.515006 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 21:01:47.515006 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 21:01:47.580933 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 21:01:47.661457 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 21:01:47.671126 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 21:01:47.671126 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 21:01:47.671126 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 21:01:47.671126 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 21:01:47.671126 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 21:01:47.727759 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (1037) Oct 2 21:01:47.718456 systemd[1]: mnt-oem478069650.mount: Deactivated successfully. Oct 2 21:01:47.732964 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 21:01:47.732964 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem478069650" Oct 2 21:01:47.732964 ignition[1034]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem478069650": device or resource busy Oct 2 21:01:47.732964 ignition[1034]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem478069650", trying btrfs: device or resource busy Oct 2 21:01:47.732964 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem478069650" Oct 2 21:01:47.732964 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem478069650" Oct 2 21:01:47.732964 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem478069650" Oct 2 21:01:47.732964 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem478069650" Oct 2 21:01:47.732964 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 21:01:47.732964 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 21:01:47.732964 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 21:01:47.732964 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2789320923" Oct 2 21:01:47.732964 ignition[1034]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2789320923": device or resource busy Oct 2 21:01:47.732964 ignition[1034]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2789320923", trying btrfs: device or resource busy Oct 2 21:01:47.991134 kernel: audit: type=1130 audit(1696280507.757:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:47.991168 kernel: audit: type=1130 audit(1696280507.857:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:47.991181 kernel: audit: type=1131 audit(1696280507.857:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:47.991190 kernel: audit: type=1130 audit(1696280507.916:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:47.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:47.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:47.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:47.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:47.731086 systemd[1]: mnt-oem2789320923.mount: Deactivated successfully. Oct 2 21:01:47.996355 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2789320923" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2789320923" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem2789320923" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem2789320923" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 21:01:47.996355 ignition[1034]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 21:01:48.274245 kernel: audit: type=1130 audit(1696280508.023:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.274274 kernel: audit: type=1131 audit(1696280508.048:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.274284 kernel: audit: type=1130 audit(1696280508.159:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.274293 kernel: audit: type=1131 audit(1696280508.249:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:47.745965 systemd[1]: Finished ignition-files.service. Oct 2 21:01:48.282146 ignition[1034]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-critools.service" Oct 2 21:01:48.282146 ignition[1034]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 21:01:48.282146 ignition[1034]: INFO : files: op(1c): [started] setting preset to enabled for "waagent.service" Oct 2 21:01:48.282146 ignition[1034]: INFO : files: op(1c): [finished] setting preset to enabled for "waagent.service" Oct 2 21:01:48.282146 ignition[1034]: INFO : files: op(1d): [started] setting preset to enabled for "nvidia.service" Oct 2 21:01:48.282146 ignition[1034]: INFO : files: op(1d): [finished] setting preset to enabled for "nvidia.service" Oct 2 21:01:48.282146 ignition[1034]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 21:01:48.282146 ignition[1034]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 21:01:48.282146 ignition[1034]: INFO : files: files passed Oct 2 21:01:48.282146 ignition[1034]: INFO : Ignition finished successfully Oct 2 21:01:47.786390 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 21:01:48.399000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.421079 initrd-setup-root-after-ignition[1059]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 21:01:48.433387 kernel: audit: type=1131 audit(1696280508.399:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:47.820630 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 21:01:48.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:47.821513 systemd[1]: Starting ignition-quench.service... Oct 2 21:01:48.471939 kernel: audit: type=1131 audit(1696280508.437:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.467000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:47.853392 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 21:01:48.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:47.853489 systemd[1]: Finished ignition-quench.service. Oct 2 21:01:48.486000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:47.910903 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 21:01:48.505672 iscsid[883]: iscsid shutting down. Oct 2 21:01:47.916456 systemd[1]: Reached target ignition-complete.target. Oct 2 21:01:47.958638 systemd[1]: Starting initrd-parse-etc.service... Oct 2 21:01:48.517000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.524285 ignition[1072]: INFO : Ignition 2.14.0 Oct 2 21:01:48.524285 ignition[1072]: INFO : Stage: umount Oct 2 21:01:48.524285 ignition[1072]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:01:48.524285 ignition[1072]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:01:48.524285 ignition[1072]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:01:48.551000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.568000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.010644 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 21:01:48.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.583000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.593000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.595812 ignition[1072]: INFO : umount: umount passed Oct 2 21:01:48.595812 ignition[1072]: INFO : Ignition finished successfully Oct 2 21:01:48.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.010749 systemd[1]: Finished initrd-parse-etc.service. Oct 2 21:01:48.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.048706 systemd[1]: Reached target initrd-fs.target. Oct 2 21:01:48.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.076931 systemd[1]: Reached target initrd.target. Oct 2 21:01:48.091183 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 21:01:48.097414 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 21:01:48.144625 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 21:01:48.160813 systemd[1]: Starting initrd-cleanup.service... Oct 2 21:01:48.196562 systemd[1]: Stopped target nss-lookup.target. Oct 2 21:01:48.210140 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 21:01:48.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.226551 systemd[1]: Stopped target timers.target. Oct 2 21:01:48.237320 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 21:01:48.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.237396 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 21:01:48.249582 systemd[1]: Stopped target initrd.target. Oct 2 21:01:48.278358 systemd[1]: Stopped target basic.target. Oct 2 21:01:48.286353 systemd[1]: Stopped target ignition-complete.target. Oct 2 21:01:48.298462 systemd[1]: Stopped target ignition-diskful.target. Oct 2 21:01:48.745000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.311054 systemd[1]: Stopped target initrd-root-device.target. Oct 2 21:01:48.322825 systemd[1]: Stopped target remote-fs.target. Oct 2 21:01:48.333988 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 21:01:48.345192 systemd[1]: Stopped target sysinit.target. Oct 2 21:01:48.776000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.356290 systemd[1]: Stopped target local-fs.target. Oct 2 21:01:48.784000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.369362 systemd[1]: Stopped target local-fs-pre.target. Oct 2 21:01:48.792000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.382992 systemd[1]: Stopped target swap.target. Oct 2 21:01:48.390465 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 21:01:48.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.390537 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 21:01:48.817000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.399315 systemd[1]: Stopped target cryptsetup.target. Oct 2 21:01:48.829000 audit: BPF prog-id=6 op=UNLOAD Oct 2 21:01:48.425655 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 21:01:48.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.847000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.425714 systemd[1]: Stopped dracut-initqueue.service. Oct 2 21:01:48.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.437666 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 21:01:48.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.437708 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 21:01:48.468163 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 21:01:48.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.892000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.468203 systemd[1]: Stopped ignition-files.service. Oct 2 21:01:48.476535 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 21:01:48.476580 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 21:01:48.487328 systemd[1]: Stopping ignition-mount.service... Oct 2 21:01:48.497192 systemd[1]: Stopping iscsid.service... Oct 2 21:01:48.500667 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 21:01:48.500745 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 21:01:48.938025 kernel: hv_netvsc 00224878-1828-0022-4878-182800224878 eth0: Data path switched from VF: enP24727s1 Oct 2 21:01:48.521938 systemd[1]: Stopping sysroot-boot.service... Oct 2 21:01:48.536133 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 21:01:48.536211 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 21:01:48.552017 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 21:01:48.552064 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 21:01:48.569547 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 21:01:48.569649 systemd[1]: Stopped iscsid.service. Oct 2 21:01:48.573825 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 21:01:48.573902 systemd[1]: Finished initrd-cleanup.service. Oct 2 21:01:48.584194 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 21:01:48.584283 systemd[1]: Stopped ignition-mount.service. Oct 2 21:01:48.594647 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 21:01:48.595062 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 21:01:48.595102 systemd[1]: Stopped ignition-disks.service. Oct 2 21:01:48.599702 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 21:01:48.599749 systemd[1]: Stopped ignition-kargs.service. Oct 2 21:01:48.608018 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 21:01:48.608055 systemd[1]: Stopped ignition-fetch.service. Oct 2 21:01:48.617480 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 21:01:48.617547 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 21:01:48.627275 systemd[1]: Stopped target paths.target. Oct 2 21:01:48.636067 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 21:01:48.645536 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 21:01:48.652053 systemd[1]: Stopped target slices.target. Oct 2 21:01:48.660225 systemd[1]: Stopped target sockets.target. Oct 2 21:01:48.668435 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 21:01:48.668483 systemd[1]: Closed iscsid.socket. Oct 2 21:01:48.676326 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 21:01:48.676369 systemd[1]: Stopped ignition-setup.service. Oct 2 21:01:48.684940 systemd[1]: Stopping iscsiuio.service... Oct 2 21:01:49.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.694972 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 21:01:48.695071 systemd[1]: Stopped iscsiuio.service. Oct 2 21:01:48.702174 systemd[1]: Stopped target network.target. Oct 2 21:01:48.710968 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 21:01:48.711005 systemd[1]: Closed iscsiuio.socket. Oct 2 21:01:48.718609 systemd[1]: Stopping systemd-networkd.service... Oct 2 21:01:48.725728 systemd[1]: Stopping systemd-resolved.service... Oct 2 21:01:48.734928 systemd-networkd[878]: eth0: DHCPv6 lease lost Oct 2 21:01:49.104000 audit: BPF prog-id=9 op=UNLOAD Oct 2 21:01:48.736611 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 21:01:48.736738 systemd[1]: Stopped systemd-networkd.service. Oct 2 21:01:48.745785 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 21:01:48.745825 systemd[1]: Closed systemd-networkd.socket. Oct 2 21:01:48.754809 systemd[1]: Stopping network-cleanup.service... Oct 2 21:01:48.767791 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 21:01:48.767855 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 21:01:48.777254 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 21:01:48.777306 systemd[1]: Stopped systemd-sysctl.service. Oct 2 21:01:48.788560 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 21:01:48.788601 systemd[1]: Stopped systemd-modules-load.service. Oct 2 21:01:48.793408 systemd[1]: Stopping systemd-udevd.service... Oct 2 21:01:48.803462 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 21:01:48.803944 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 21:01:48.804039 systemd[1]: Stopped systemd-resolved.service. Oct 2 21:01:48.809425 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 21:01:48.809554 systemd[1]: Stopped systemd-udevd.service. Oct 2 21:01:48.819041 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 21:01:48.819075 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 21:01:48.831218 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 21:01:48.831252 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 21:01:48.835739 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 21:01:48.835788 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 21:01:48.844053 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 21:01:48.844095 systemd[1]: Stopped dracut-cmdline.service. Oct 2 21:01:48.848256 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 21:01:48.848290 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 21:01:49.245000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.859257 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 21:01:48.867917 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 21:01:49.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:01:48.867975 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 21:01:48.882481 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 21:01:48.882607 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 21:01:49.064815 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 21:01:49.064928 systemd[1]: Stopped network-cleanup.service. Oct 2 21:01:49.233831 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 21:01:49.233943 systemd[1]: Stopped sysroot-boot.service. Oct 2 21:01:49.245835 systemd[1]: Reached target initrd-switch-root.target. Oct 2 21:01:49.255718 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 21:01:49.255778 systemd[1]: Stopped initrd-setup-root.service. Oct 2 21:01:49.266069 systemd[1]: Starting initrd-switch-root.service... Oct 2 21:01:49.287610 systemd[1]: Switching root. Oct 2 21:01:49.331338 systemd-journald[276]: Journal stopped Oct 2 21:02:01.195710 systemd-journald[276]: Received SIGTERM from PID 1 (n/a). Oct 2 21:02:01.195732 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 21:02:01.195744 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 21:02:01.195753 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 21:02:01.195761 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 21:02:01.195770 kernel: SELinux: policy capability open_perms=1 Oct 2 21:02:01.195778 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 21:02:01.195786 kernel: SELinux: policy capability always_check_network=0 Oct 2 21:02:01.195794 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 21:02:01.195803 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 21:02:01.195810 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 21:02:01.195818 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 21:02:01.195826 systemd[1]: Successfully loaded SELinux policy in 257.283ms. Oct 2 21:02:01.195836 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 26.379ms. Oct 2 21:02:01.195848 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 21:02:01.195858 systemd[1]: Detected virtualization microsoft. Oct 2 21:02:01.195867 systemd[1]: Detected architecture arm64. Oct 2 21:02:01.195875 systemd[1]: Detected first boot. Oct 2 21:02:01.195884 systemd[1]: Hostname set to . Oct 2 21:02:01.195893 systemd[1]: Initializing machine ID from random generator. Oct 2 21:02:01.195902 systemd[1]: Populated /etc with preset unit settings. Oct 2 21:02:01.195911 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:02:01.195922 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:02:01.195933 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:02:01.195942 kernel: kauditd_printk_skb: 40 callbacks suppressed Oct 2 21:02:01.195950 kernel: audit: type=1334 audit(1696280520.496:88): prog-id=12 op=LOAD Oct 2 21:02:01.195958 kernel: audit: type=1334 audit(1696280520.496:89): prog-id=3 op=UNLOAD Oct 2 21:02:01.195967 kernel: audit: type=1334 audit(1696280520.502:90): prog-id=13 op=LOAD Oct 2 21:02:01.195976 kernel: audit: type=1334 audit(1696280520.507:91): prog-id=14 op=LOAD Oct 2 21:02:01.195985 kernel: audit: type=1334 audit(1696280520.507:92): prog-id=4 op=UNLOAD Oct 2 21:02:01.195993 kernel: audit: type=1334 audit(1696280520.507:93): prog-id=5 op=UNLOAD Oct 2 21:02:01.196002 kernel: audit: type=1334 audit(1696280520.513:94): prog-id=15 op=LOAD Oct 2 21:02:01.196010 kernel: audit: type=1334 audit(1696280520.513:95): prog-id=12 op=UNLOAD Oct 2 21:02:01.196019 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 21:02:01.196028 kernel: audit: type=1334 audit(1696280520.518:96): prog-id=16 op=LOAD Oct 2 21:02:01.196036 systemd[1]: Stopped initrd-switch-root.service. Oct 2 21:02:01.196046 kernel: audit: type=1334 audit(1696280520.524:97): prog-id=17 op=LOAD Oct 2 21:02:01.196055 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 21:02:01.196064 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 21:02:01.196074 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 21:02:01.196084 systemd[1]: Created slice system-getty.slice. Oct 2 21:02:01.196094 systemd[1]: Created slice system-modprobe.slice. Oct 2 21:02:01.196103 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 21:02:01.196113 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 21:02:01.196122 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 21:02:01.196132 systemd[1]: Created slice user.slice. Oct 2 21:02:01.196141 systemd[1]: Started systemd-ask-password-console.path. Oct 2 21:02:01.196151 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 21:02:01.196159 systemd[1]: Set up automount boot.automount. Oct 2 21:02:01.196169 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 21:02:01.196178 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 21:02:01.196187 systemd[1]: Stopped target initrd-fs.target. Oct 2 21:02:01.196196 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 21:02:01.196207 systemd[1]: Reached target integritysetup.target. Oct 2 21:02:01.196216 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 21:02:01.196225 systemd[1]: Reached target remote-fs.target. Oct 2 21:02:01.196234 systemd[1]: Reached target slices.target. Oct 2 21:02:01.196243 systemd[1]: Reached target swap.target. Oct 2 21:02:01.196252 systemd[1]: Reached target torcx.target. Oct 2 21:02:01.196262 systemd[1]: Reached target veritysetup.target. Oct 2 21:02:01.196271 systemd[1]: Listening on systemd-coredump.socket. Oct 2 21:02:01.196281 systemd[1]: Listening on systemd-initctl.socket. Oct 2 21:02:01.196290 systemd[1]: Listening on systemd-networkd.socket. Oct 2 21:02:01.196300 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 21:02:01.196309 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 21:02:01.196319 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 21:02:01.196329 systemd[1]: Mounting dev-hugepages.mount... Oct 2 21:02:01.196339 systemd[1]: Mounting dev-mqueue.mount... Oct 2 21:02:01.196348 systemd[1]: Mounting media.mount... Oct 2 21:02:01.196357 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 21:02:01.196367 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 21:02:01.196376 systemd[1]: Mounting tmp.mount... Oct 2 21:02:01.196385 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 21:02:01.196395 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 21:02:01.196404 systemd[1]: Starting kmod-static-nodes.service... Oct 2 21:02:01.196415 systemd[1]: Starting modprobe@configfs.service... Oct 2 21:02:01.196425 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 21:02:01.196434 systemd[1]: Starting modprobe@drm.service... Oct 2 21:02:01.196443 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 21:02:01.196452 systemd[1]: Starting modprobe@fuse.service... Oct 2 21:02:01.196461 systemd[1]: Starting modprobe@loop.service... Oct 2 21:02:01.196471 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 21:02:01.196480 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 21:02:01.196490 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 21:02:01.196509 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 21:02:01.196519 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 21:02:01.196528 systemd[1]: Stopped systemd-journald.service. Oct 2 21:02:01.196538 systemd[1]: systemd-journald.service: Consumed 3.425s CPU time. Oct 2 21:02:01.196547 systemd[1]: Starting systemd-journald.service... Oct 2 21:02:01.196556 systemd[1]: Starting systemd-modules-load.service... Oct 2 21:02:01.196566 systemd[1]: Starting systemd-network-generator.service... Oct 2 21:02:01.196575 systemd[1]: Starting systemd-remount-fs.service... Oct 2 21:02:01.196586 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 21:02:01.196595 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 21:02:01.196605 systemd[1]: Stopped verity-setup.service. Oct 2 21:02:01.196614 systemd[1]: Mounted dev-hugepages.mount. Oct 2 21:02:01.196624 systemd[1]: Mounted dev-mqueue.mount. Oct 2 21:02:01.196633 systemd[1]: Mounted media.mount. Oct 2 21:02:01.196642 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 21:02:01.196651 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 21:02:01.196663 systemd-journald[1183]: Journal started Oct 2 21:02:01.196701 systemd-journald[1183]: Runtime Journal (/run/log/journal/4a5602a4d00b44a39b72c6d384a62a29) is 8.0M, max 78.6M, 70.6M free. Oct 2 21:01:51.672000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 21:01:52.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 21:01:52.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 21:01:52.480000 audit: BPF prog-id=10 op=LOAD Oct 2 21:01:52.480000 audit: BPF prog-id=10 op=UNLOAD Oct 2 21:01:52.480000 audit: BPF prog-id=11 op=LOAD Oct 2 21:01:52.480000 audit: BPF prog-id=11 op=UNLOAD Oct 2 21:02:00.496000 audit: BPF prog-id=12 op=LOAD Oct 2 21:02:00.496000 audit: BPF prog-id=3 op=UNLOAD Oct 2 21:02:00.502000 audit: BPF prog-id=13 op=LOAD Oct 2 21:02:00.507000 audit: BPF prog-id=14 op=LOAD Oct 2 21:02:00.507000 audit: BPF prog-id=4 op=UNLOAD Oct 2 21:02:00.507000 audit: BPF prog-id=5 op=UNLOAD Oct 2 21:02:00.513000 audit: BPF prog-id=15 op=LOAD Oct 2 21:02:00.513000 audit: BPF prog-id=12 op=UNLOAD Oct 2 21:02:00.518000 audit: BPF prog-id=16 op=LOAD Oct 2 21:02:00.524000 audit: BPF prog-id=17 op=LOAD Oct 2 21:02:00.524000 audit: BPF prog-id=13 op=UNLOAD Oct 2 21:02:00.524000 audit: BPF prog-id=14 op=UNLOAD Oct 2 21:02:00.529000 audit: BPF prog-id=18 op=LOAD Oct 2 21:02:00.529000 audit: BPF prog-id=15 op=UNLOAD Oct 2 21:02:00.535000 audit: BPF prog-id=19 op=LOAD Oct 2 21:02:00.540000 audit: BPF prog-id=20 op=LOAD Oct 2 21:02:00.540000 audit: BPF prog-id=16 op=UNLOAD Oct 2 21:02:00.540000 audit: BPF prog-id=17 op=UNLOAD Oct 2 21:02:00.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:00.568000 audit: BPF prog-id=18 op=UNLOAD Oct 2 21:02:00.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:00.572000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.025000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.054000 audit: BPF prog-id=21 op=LOAD Oct 2 21:02:01.054000 audit: BPF prog-id=22 op=LOAD Oct 2 21:02:01.054000 audit: BPF prog-id=23 op=LOAD Oct 2 21:02:01.054000 audit: BPF prog-id=19 op=UNLOAD Oct 2 21:02:01.054000 audit: BPF prog-id=20 op=UNLOAD Oct 2 21:02:01.151000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.191000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 21:02:01.191000 audit[1183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=fffff6ddeb10 a2=4000 a3=1 items=0 ppid=1 pid=1183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:01.191000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 21:01:53.710111 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:02:00.496067 systemd[1]: Queued start job for default target multi-user.target. Oct 2 21:01:53.755463 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 21:02:00.541322 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 21:02:01.206441 systemd[1]: Started systemd-journald.service. Oct 2 21:01:53.755486 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 21:02:00.541726 systemd[1]: systemd-journald.service: Consumed 3.425s CPU time. Oct 2 21:01:53.755547 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 21:01:53.755558 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 21:01:53.755594 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 21:01:53.755608 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 21:01:53.755824 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 21:01:53.755859 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 21:01:53.755871 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 21:01:53.756247 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 21:01:53.756283 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 21:01:53.756300 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 21:01:53.756314 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 21:01:53.756332 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 21:01:53.756344 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:53Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 21:01:59.504834 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:59Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:01:59.505130 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:59Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:01:59.505238 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:59Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:01:59.505425 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:59Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:01:59.505482 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:59Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 21:01:59.505560 /usr/lib/systemd/system-generators/torcx-generator[1105]: time="2023-10-02T21:01:59Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 21:02:01.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.210272 systemd[1]: Mounted tmp.mount. Oct 2 21:02:01.216161 systemd[1]: Finished kmod-static-nodes.service. Oct 2 21:02:01.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.223376 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 21:02:01.223644 systemd[1]: Finished modprobe@configfs.service. Oct 2 21:02:01.227000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.228579 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 21:02:01.228704 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 21:02:01.232000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.232000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.233469 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 21:02:01.233627 systemd[1]: Finished modprobe@drm.service. Oct 2 21:02:01.239000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.240432 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 21:02:01.241846 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 21:02:01.251513 kernel: loop: module loaded Oct 2 21:02:01.251580 kernel: fuse: init (API version 7.34) Oct 2 21:02:01.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.251863 systemd[1]: Finished systemd-network-generator.service. Oct 2 21:02:01.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.257306 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 21:02:01.257428 systemd[1]: Finished modprobe@fuse.service. Oct 2 21:02:01.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.262023 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 21:02:01.262140 systemd[1]: Finished modprobe@loop.service. Oct 2 21:02:01.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.267693 systemd[1]: Finished systemd-remount-fs.service. Oct 2 21:02:01.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.276235 systemd[1]: Finished systemd-modules-load.service. Oct 2 21:02:01.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.282219 systemd[1]: Reached target network-pre.target. Oct 2 21:02:01.289898 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 21:02:01.302807 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 21:02:01.307849 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 21:02:01.340351 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 21:02:01.345807 systemd[1]: Starting systemd-journal-flush.service... Oct 2 21:02:01.350059 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 21:02:01.351086 systemd[1]: Starting systemd-random-seed.service... Oct 2 21:02:01.355410 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 21:02:01.356469 systemd[1]: Starting systemd-sysctl.service... Oct 2 21:02:01.362585 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 21:02:01.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.367479 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 21:02:01.372000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.373200 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 21:02:01.379386 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 21:02:01.385736 systemd[1]: Starting systemd-sysusers.service... Oct 2 21:02:01.391247 systemd[1]: Starting systemd-udev-settle.service... Oct 2 21:02:01.416682 systemd[1]: Finished systemd-random-seed.service. Oct 2 21:02:01.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.421765 systemd[1]: Reached target first-boot-complete.target. Oct 2 21:02:01.431283 udevadm[1225]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 21:02:01.438414 systemd-journald[1183]: Time spent on flushing to /var/log/journal/4a5602a4d00b44a39b72c6d384a62a29 is 19.810ms for 1126 entries. Oct 2 21:02:01.438414 systemd-journald[1183]: System Journal (/var/log/journal/4a5602a4d00b44a39b72c6d384a62a29) is 8.0M, max 2.6G, 2.6G free. Oct 2 21:02:01.515710 systemd-journald[1183]: Received client request to flush runtime journal. Oct 2 21:02:01.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:01.487515 systemd[1]: Finished systemd-sysctl.service. Oct 2 21:02:01.517115 systemd[1]: Finished systemd-journal-flush.service. Oct 2 21:02:01.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:02.016669 systemd[1]: Finished systemd-sysusers.service. Oct 2 21:02:02.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:02.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:02.608000 audit: BPF prog-id=24 op=LOAD Oct 2 21:02:02.609000 audit: BPF prog-id=25 op=LOAD Oct 2 21:02:02.609000 audit: BPF prog-id=7 op=UNLOAD Oct 2 21:02:02.609000 audit: BPF prog-id=8 op=UNLOAD Oct 2 21:02:02.604002 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 21:02:02.610178 systemd[1]: Starting systemd-udevd.service... Oct 2 21:02:02.633760 systemd-udevd[1228]: Using default interface naming scheme 'v252'. Oct 2 21:02:02.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:02.787000 audit: BPF prog-id=26 op=LOAD Oct 2 21:02:02.781609 systemd[1]: Started systemd-udevd.service. Oct 2 21:02:02.790764 systemd[1]: Starting systemd-networkd.service... Oct 2 21:02:02.832778 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 21:02:02.846000 audit: BPF prog-id=27 op=LOAD Oct 2 21:02:02.846000 audit: BPF prog-id=28 op=LOAD Oct 2 21:02:02.846000 audit: BPF prog-id=29 op=LOAD Oct 2 21:02:02.847615 systemd[1]: Starting systemd-userdbd.service... Oct 2 21:02:02.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:02.913707 systemd[1]: Started systemd-userdbd.service. Oct 2 21:02:02.920000 audit[1245]: AVC avc: denied { confidentiality } for pid=1245 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 21:02:02.931362 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 21:02:02.931434 kernel: hv_vmbus: registering driver hv_balloon Oct 2 21:02:02.935919 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 21:02:02.935987 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 21:02:02.947937 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 21:02:02.948013 kernel: hv_balloon: Memory hot add disabled on ARM64 Oct 2 21:02:02.957051 kernel: Console: switching to colour dummy device 80x25 Oct 2 21:02:02.960513 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 21:02:02.920000 audit[1245]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaaae0999700 a1=aa2c a2=ffffb74924b0 a3=aaaae08f3010 items=10 ppid=1228 pid=1245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:02.920000 audit: CWD cwd="/" Oct 2 21:02:02.920000 audit: PATH item=0 name=(null) inode=11417 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:02:02.920000 audit: PATH item=1 name=(null) inode=11418 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:02:02.920000 audit: PATH item=2 name=(null) inode=11417 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:02:02.920000 audit: PATH item=3 name=(null) inode=11419 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:02:02.920000 audit: PATH item=4 name=(null) inode=11417 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:02:02.920000 audit: PATH item=5 name=(null) inode=11420 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:02:02.920000 audit: PATH item=6 name=(null) inode=11417 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:02:02.920000 audit: PATH item=7 name=(null) inode=11421 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:02:02.920000 audit: PATH item=8 name=(null) inode=11417 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:02:02.920000 audit: PATH item=9 name=(null) inode=11422 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:02:02.920000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 21:02:02.986528 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 21:02:03.025870 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 21:02:03.025973 kernel: hv_vmbus: registering driver hv_utils Oct 2 21:02:03.026514 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 21:02:03.032634 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 21:02:03.032741 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 21:02:02.766455 systemd-networkd[1246]: lo: Link UP Oct 2 21:02:02.841938 systemd-journald[1183]: Time jumped backwards, rotating. Oct 2 21:02:02.842012 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1244) Oct 2 21:02:02.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:02.767147 systemd-networkd[1246]: lo: Gained carrier Oct 2 21:02:02.767574 systemd-networkd[1246]: Enumeration completed Oct 2 21:02:02.767662 systemd[1]: Started systemd-networkd.service. Oct 2 21:02:02.777271 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 21:02:02.797535 systemd-networkd[1246]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 21:02:02.852159 kernel: mlx5_core 6097:00:02.0 enP24727s1: Link up Oct 2 21:02:02.874979 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 21:02:02.880512 systemd[1]: Finished systemd-udev-settle.service. Oct 2 21:02:02.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:02.886770 systemd[1]: Starting lvm2-activation-early.service... Oct 2 21:02:02.898161 kernel: hv_netvsc 00224878-1828-0022-4878-182800224878 eth0: Data path switched to VF: enP24727s1 Oct 2 21:02:02.898755 systemd-networkd[1246]: enP24727s1: Link UP Oct 2 21:02:02.898836 systemd-networkd[1246]: eth0: Link UP Oct 2 21:02:02.898840 systemd-networkd[1246]: eth0: Gained carrier Oct 2 21:02:02.907452 systemd-networkd[1246]: enP24727s1: Gained carrier Oct 2 21:02:02.917302 systemd-networkd[1246]: eth0: DHCPv4 address 10.200.20.10/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 21:02:03.161585 lvm[1306]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 21:02:03.205300 systemd[1]: Finished lvm2-activation-early.service. Oct 2 21:02:03.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:03.210217 systemd[1]: Reached target cryptsetup.target. Oct 2 21:02:03.216068 systemd[1]: Starting lvm2-activation.service... Oct 2 21:02:03.222341 lvm[1307]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 21:02:03.243187 systemd[1]: Finished lvm2-activation.service. Oct 2 21:02:03.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:03.247635 systemd[1]: Reached target local-fs-pre.target. Oct 2 21:02:03.252016 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 21:02:03.252042 systemd[1]: Reached target local-fs.target. Oct 2 21:02:03.256343 systemd[1]: Reached target machines.target. Oct 2 21:02:03.261766 systemd[1]: Starting ldconfig.service... Oct 2 21:02:03.265462 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 21:02:03.265526 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 21:02:03.267100 systemd[1]: Starting systemd-boot-update.service... Oct 2 21:02:03.272259 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 21:02:03.279039 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 21:02:03.283520 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 21:02:03.283575 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 21:02:03.284807 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 21:02:03.304530 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1309 (bootctl) Oct 2 21:02:03.306082 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 21:02:03.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:03.740645 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 21:02:04.103194 systemd-tmpfiles[1312]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 21:02:04.259861 systemd-fsck[1317]: fsck.fat 4.2 (2021-01-31) Oct 2 21:02:04.259861 systemd-fsck[1317]: /dev/sda1: 236 files, 113463/258078 clusters Oct 2 21:02:04.263733 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 21:02:04.268000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:04.272673 systemd[1]: Mounting boot.mount... Oct 2 21:02:04.317007 systemd[1]: Mounted boot.mount. Oct 2 21:02:04.328367 systemd[1]: Finished systemd-boot-update.service. Oct 2 21:02:04.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:04.429739 systemd-tmpfiles[1312]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 21:02:04.554901 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 21:02:04.555486 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 21:02:04.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:04.602077 systemd-tmpfiles[1312]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 21:02:04.647276 systemd-networkd[1246]: eth0: Gained IPv6LL Oct 2 21:02:04.652391 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 21:02:04.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:05.874151 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 21:02:05.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:05.881471 systemd[1]: Starting audit-rules.service... Oct 2 21:02:05.883274 kernel: kauditd_printk_skb: 82 callbacks suppressed Oct 2 21:02:05.883315 kernel: audit: type=1130 audit(1696280525.878:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:05.904471 systemd[1]: Starting clean-ca-certificates.service... Oct 2 21:02:05.910147 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 21:02:05.914000 audit: BPF prog-id=30 op=LOAD Oct 2 21:02:05.916485 systemd[1]: Starting systemd-resolved.service... Oct 2 21:02:05.921153 kernel: audit: type=1334 audit(1696280525.914:166): prog-id=30 op=LOAD Oct 2 21:02:05.924000 audit: BPF prog-id=31 op=LOAD Oct 2 21:02:05.926325 systemd[1]: Starting systemd-timesyncd.service... Oct 2 21:02:05.935313 kernel: audit: type=1334 audit(1696280525.924:167): prog-id=31 op=LOAD Oct 2 21:02:05.935589 systemd[1]: Starting systemd-update-utmp.service... Oct 2 21:02:05.971139 systemd[1]: Finished clean-ca-certificates.service. Oct 2 21:02:05.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:05.976226 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 21:02:05.995153 kernel: audit: type=1130 audit(1696280525.975:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:06.016000 audit[1330]: SYSTEM_BOOT pid=1330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 21:02:06.029222 systemd[1]: Finished systemd-update-utmp.service. Oct 2 21:02:06.037811 kernel: audit: type=1127 audit(1696280526.016:169): pid=1330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 21:02:06.037885 kernel: audit: type=1130 audit(1696280526.036:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:06.036000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:06.054353 systemd[1]: Started systemd-timesyncd.service. Oct 2 21:02:06.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:06.059289 systemd[1]: Reached target time-set.target. Oct 2 21:02:06.078136 kernel: audit: type=1130 audit(1696280526.057:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:06.115635 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 21:02:06.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:06.140181 kernel: audit: type=1130 audit(1696280526.120:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:06.175765 systemd-resolved[1328]: Positive Trust Anchors: Oct 2 21:02:06.175779 systemd-resolved[1328]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 21:02:06.175807 systemd-resolved[1328]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 21:02:06.236510 systemd-timesyncd[1329]: Contacted time server 216.66.48.42:123 (0.flatcar.pool.ntp.org). Oct 2 21:02:06.236578 systemd-timesyncd[1329]: Initial clock synchronization to Mon 2023-10-02 21:02:06.236618 UTC. Oct 2 21:02:06.264458 systemd-resolved[1328]: Using system hostname 'ci-3510.3.0-a-4ade0e9e10'. Oct 2 21:02:06.266177 systemd[1]: Started systemd-resolved.service. Oct 2 21:02:06.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:06.271224 systemd[1]: Reached target network.target. Oct 2 21:02:06.291503 kernel: audit: type=1130 audit(1696280526.269:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:06.291701 systemd[1]: Reached target network-online.target. Oct 2 21:02:06.296429 systemd[1]: Reached target nss-lookup.target. Oct 2 21:02:06.368000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 21:02:06.368000 audit[1345]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffce625a20 a2=420 a3=0 items=0 ppid=1324 pid=1345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:06.368000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 21:02:06.382142 kernel: audit: type=1305 audit(1696280526.368:174): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 21:02:06.385197 augenrules[1345]: No rules Oct 2 21:02:06.386177 systemd[1]: Finished audit-rules.service. Oct 2 21:02:12.886992 ldconfig[1308]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 21:02:12.896927 systemd[1]: Finished ldconfig.service. Oct 2 21:02:12.903042 systemd[1]: Starting systemd-update-done.service... Oct 2 21:02:12.943757 systemd[1]: Finished systemd-update-done.service. Oct 2 21:02:12.951962 systemd[1]: Reached target sysinit.target. Oct 2 21:02:12.959828 systemd[1]: Started motdgen.path. Oct 2 21:02:12.963857 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 21:02:12.970307 systemd[1]: Started logrotate.timer. Oct 2 21:02:12.974657 systemd[1]: Started mdadm.timer. Oct 2 21:02:12.978866 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 21:02:12.984387 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 21:02:12.984425 systemd[1]: Reached target paths.target. Oct 2 21:02:12.988968 systemd[1]: Reached target timers.target. Oct 2 21:02:12.994624 systemd[1]: Listening on dbus.socket. Oct 2 21:02:13.000179 systemd[1]: Starting docker.socket... Oct 2 21:02:13.007428 systemd[1]: Listening on sshd.socket. Oct 2 21:02:13.011703 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 21:02:13.012226 systemd[1]: Listening on docker.socket. Oct 2 21:02:13.016440 systemd[1]: Reached target sockets.target. Oct 2 21:02:13.020723 systemd[1]: Reached target basic.target. Oct 2 21:02:13.025231 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 21:02:13.025259 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 21:02:13.026474 systemd[1]: Starting containerd.service... Oct 2 21:02:13.031677 systemd[1]: Starting dbus.service... Oct 2 21:02:13.036051 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 21:02:13.041610 systemd[1]: Starting extend-filesystems.service... Oct 2 21:02:13.048659 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 21:02:13.050589 systemd[1]: Starting motdgen.service... Oct 2 21:02:13.054960 systemd[1]: Started nvidia.service. Oct 2 21:02:13.061381 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 21:02:13.066596 systemd[1]: Starting prepare-critools.service... Oct 2 21:02:13.071683 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 21:02:13.076790 systemd[1]: Starting sshd-keygen.service... Oct 2 21:02:13.083167 systemd[1]: Starting systemd-logind.service... Oct 2 21:02:13.086979 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 21:02:13.087041 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 21:02:13.087675 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 21:02:13.089793 systemd[1]: Starting update-engine.service... Oct 2 21:02:13.096353 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 21:02:13.105434 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 21:02:13.105592 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 21:02:13.172548 jq[1355]: false Oct 2 21:02:13.172807 jq[1371]: true Oct 2 21:02:13.192404 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 21:02:13.192585 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 21:02:13.203640 extend-filesystems[1356]: Found sda Oct 2 21:02:13.207924 extend-filesystems[1356]: Found sda1 Oct 2 21:02:13.207924 extend-filesystems[1356]: Found sda2 Oct 2 21:02:13.207924 extend-filesystems[1356]: Found sda3 Oct 2 21:02:13.207924 extend-filesystems[1356]: Found usr Oct 2 21:02:13.207924 extend-filesystems[1356]: Found sda4 Oct 2 21:02:13.207924 extend-filesystems[1356]: Found sda6 Oct 2 21:02:13.207924 extend-filesystems[1356]: Found sda7 Oct 2 21:02:13.207924 extend-filesystems[1356]: Found sda9 Oct 2 21:02:13.207924 extend-filesystems[1356]: Checking size of /dev/sda9 Oct 2 21:02:13.318388 tar[1374]: crictl Oct 2 21:02:13.212866 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 21:02:13.318676 tar[1373]: ./ Oct 2 21:02:13.318676 tar[1373]: ./loopback Oct 2 21:02:13.318878 jq[1378]: true Oct 2 21:02:13.318944 extend-filesystems[1356]: Old size kept for /dev/sda9 Oct 2 21:02:13.318944 extend-filesystems[1356]: Found sr0 Oct 2 21:02:13.213048 systemd[1]: Finished motdgen.service. Oct 2 21:02:13.366418 env[1380]: time="2023-10-02T21:02:13.364422316Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 21:02:13.367485 tar[1373]: ./bandwidth Oct 2 21:02:13.221611 systemd-logind[1366]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 21:02:13.225820 systemd-logind[1366]: New seat seat0. Oct 2 21:02:13.318202 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 21:02:13.318364 systemd[1]: Finished extend-filesystems.service. Oct 2 21:02:13.446107 bash[1426]: Updated "/home/core/.ssh/authorized_keys" Oct 2 21:02:13.447010 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 21:02:13.478477 env[1380]: time="2023-10-02T21:02:13.478437259Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 21:02:13.478867 env[1380]: time="2023-10-02T21:02:13.478842943Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:02:13.482143 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 21:02:13.484430 env[1380]: time="2023-10-02T21:02:13.484396435Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 21:02:13.484535 env[1380]: time="2023-10-02T21:02:13.484520316Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:02:13.484834 env[1380]: time="2023-10-02T21:02:13.484810639Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 21:02:13.484907 env[1380]: time="2023-10-02T21:02:13.484894279Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 21:02:13.484961 env[1380]: time="2023-10-02T21:02:13.484947640Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 21:02:13.485016 env[1380]: time="2023-10-02T21:02:13.485004040Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 21:02:13.485190 env[1380]: time="2023-10-02T21:02:13.485172882Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:02:13.485462 env[1380]: time="2023-10-02T21:02:13.485443404Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:02:13.486774 env[1380]: time="2023-10-02T21:02:13.486746457Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 21:02:13.490360 env[1380]: time="2023-10-02T21:02:13.490334570Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 21:02:13.490530 env[1380]: time="2023-10-02T21:02:13.490511972Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 21:02:13.490601 env[1380]: time="2023-10-02T21:02:13.490588812Z" level=info msg="metadata content store policy set" policy=shared Oct 2 21:02:13.491248 tar[1373]: ./ptp Oct 2 21:02:13.505613 env[1380]: time="2023-10-02T21:02:13.504513102Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 21:02:13.505613 env[1380]: time="2023-10-02T21:02:13.504550903Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 21:02:13.505613 env[1380]: time="2023-10-02T21:02:13.504566463Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 21:02:13.505613 env[1380]: time="2023-10-02T21:02:13.504607143Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 21:02:13.505613 env[1380]: time="2023-10-02T21:02:13.504623583Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 21:02:13.505613 env[1380]: time="2023-10-02T21:02:13.504637743Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 21:02:13.505613 env[1380]: time="2023-10-02T21:02:13.504651464Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 21:02:13.505613 env[1380]: time="2023-10-02T21:02:13.505110028Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 21:02:13.505613 env[1380]: time="2023-10-02T21:02:13.505148428Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 21:02:13.505613 env[1380]: time="2023-10-02T21:02:13.505162668Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 21:02:13.505613 env[1380]: time="2023-10-02T21:02:13.505175348Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 21:02:13.505613 env[1380]: time="2023-10-02T21:02:13.505189309Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 21:02:13.505613 env[1380]: time="2023-10-02T21:02:13.505306830Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 21:02:13.505613 env[1380]: time="2023-10-02T21:02:13.505376030Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 21:02:13.506101 env[1380]: time="2023-10-02T21:02:13.506075917Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 21:02:13.506196 env[1380]: time="2023-10-02T21:02:13.506181918Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 21:02:13.506253 env[1380]: time="2023-10-02T21:02:13.506241278Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 21:02:13.506373 env[1380]: time="2023-10-02T21:02:13.506358919Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 21:02:13.506600 env[1380]: time="2023-10-02T21:02:13.506584962Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 21:02:13.506674 env[1380]: time="2023-10-02T21:02:13.506661522Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 21:02:13.506734 env[1380]: time="2023-10-02T21:02:13.506721803Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 21:02:13.506800 env[1380]: time="2023-10-02T21:02:13.506787683Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 21:02:13.506863 env[1380]: time="2023-10-02T21:02:13.506850324Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 21:02:13.506915 env[1380]: time="2023-10-02T21:02:13.506904205Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 21:02:13.506975 env[1380]: time="2023-10-02T21:02:13.506962405Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 21:02:13.507045 env[1380]: time="2023-10-02T21:02:13.507032326Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 21:02:13.507240 env[1380]: time="2023-10-02T21:02:13.507221608Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 21:02:13.507333 env[1380]: time="2023-10-02T21:02:13.507319128Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 21:02:13.507397 env[1380]: time="2023-10-02T21:02:13.507384209Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 21:02:13.507455 env[1380]: time="2023-10-02T21:02:13.507442490Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 21:02:13.507513 env[1380]: time="2023-10-02T21:02:13.507499210Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 21:02:13.507568 env[1380]: time="2023-10-02T21:02:13.507556611Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 21:02:13.507629 env[1380]: time="2023-10-02T21:02:13.507615811Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 21:02:13.507706 env[1380]: time="2023-10-02T21:02:13.507693732Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 21:02:13.508000 env[1380]: time="2023-10-02T21:02:13.507945934Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 21:02:13.525036 env[1380]: time="2023-10-02T21:02:13.508519100Z" level=info msg="Connect containerd service" Oct 2 21:02:13.525036 env[1380]: time="2023-10-02T21:02:13.508946864Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 21:02:13.525036 env[1380]: time="2023-10-02T21:02:13.509996953Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 21:02:13.525036 env[1380]: time="2023-10-02T21:02:13.510321836Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 21:02:13.525036 env[1380]: time="2023-10-02T21:02:13.510359517Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 21:02:13.525036 env[1380]: time="2023-10-02T21:02:13.510406557Z" level=info msg="containerd successfully booted in 0.153529s" Oct 2 21:02:13.525036 env[1380]: time="2023-10-02T21:02:13.519997727Z" level=info msg="Start subscribing containerd event" Oct 2 21:02:13.525036 env[1380]: time="2023-10-02T21:02:13.520045327Z" level=info msg="Start recovering state" Oct 2 21:02:13.525036 env[1380]: time="2023-10-02T21:02:13.520108368Z" level=info msg="Start event monitor" Oct 2 21:02:13.525036 env[1380]: time="2023-10-02T21:02:13.520179488Z" level=info msg="Start snapshots syncer" Oct 2 21:02:13.525036 env[1380]: time="2023-10-02T21:02:13.520190809Z" level=info msg="Start cni network conf syncer for default" Oct 2 21:02:13.525036 env[1380]: time="2023-10-02T21:02:13.520200449Z" level=info msg="Start streaming server" Oct 2 21:02:13.510481 systemd[1]: Started containerd.service. Oct 2 21:02:13.588807 tar[1373]: ./vlan Oct 2 21:02:13.669132 tar[1373]: ./host-device Oct 2 21:02:13.725517 tar[1373]: ./tuning Oct 2 21:02:13.778600 tar[1373]: ./vrf Oct 2 21:02:13.794008 dbus-daemon[1354]: [system] SELinux support is enabled Oct 2 21:02:13.794215 systemd[1]: Started dbus.service. Oct 2 21:02:13.799755 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 21:02:13.799784 systemd[1]: Reached target system-config.target. Oct 2 21:02:13.800530 dbus-daemon[1354]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 21:02:13.806725 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 21:02:13.806751 systemd[1]: Reached target user-config.target. Oct 2 21:02:13.812491 systemd[1]: Started systemd-logind.service. Oct 2 21:02:13.833087 tar[1373]: ./sbr Oct 2 21:02:13.863102 tar[1373]: ./tap Oct 2 21:02:13.897593 tar[1373]: ./dhcp Oct 2 21:02:13.905134 update_engine[1368]: I1002 21:02:13.874989 1368 main.cc:92] Flatcar Update Engine starting Oct 2 21:02:13.971313 systemd[1]: Finished prepare-critools.service. Oct 2 21:02:13.987698 tar[1373]: ./static Oct 2 21:02:14.012246 tar[1373]: ./firewall Oct 2 21:02:14.034968 systemd[1]: Started update-engine.service. Oct 2 21:02:14.041125 update_engine[1368]: I1002 21:02:14.041085 1368 update_check_scheduler.cc:74] Next update check in 9m38s Oct 2 21:02:14.041583 systemd[1]: Started locksmithd.service. Oct 2 21:02:14.064663 tar[1373]: ./macvlan Oct 2 21:02:14.121517 tar[1373]: ./dummy Oct 2 21:02:14.154830 tar[1373]: ./bridge Oct 2 21:02:14.190969 tar[1373]: ./ipvlan Oct 2 21:02:14.223971 tar[1373]: ./portmap Oct 2 21:02:14.255784 tar[1373]: ./host-local Oct 2 21:02:14.325910 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 21:02:14.998865 sshd_keygen[1370]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 21:02:15.024702 systemd[1]: Finished sshd-keygen.service. Oct 2 21:02:15.030356 systemd[1]: Starting issuegen.service... Oct 2 21:02:15.035003 systemd[1]: Started waagent.service. Oct 2 21:02:15.041503 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 21:02:15.041652 systemd[1]: Finished issuegen.service. Oct 2 21:02:15.047146 systemd[1]: Starting systemd-user-sessions.service... Oct 2 21:02:15.072399 systemd[1]: Finished systemd-user-sessions.service. Oct 2 21:02:15.078438 systemd[1]: Started getty@tty1.service. Oct 2 21:02:15.083702 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 21:02:15.088536 systemd[1]: Reached target getty.target. Oct 2 21:02:15.092523 systemd[1]: Reached target multi-user.target. Oct 2 21:02:15.099539 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 21:02:15.109107 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 21:02:15.109265 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 21:02:15.114680 systemd[1]: Startup finished in 764ms (kernel) + 22.597s (initrd) + 24.320s (userspace) = 47.682s. Oct 2 21:02:15.401455 locksmithd[1462]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 21:02:15.814279 login[1482]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Oct 2 21:02:15.815650 login[1483]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 21:02:15.856738 systemd[1]: Created slice user-500.slice. Oct 2 21:02:15.857922 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 21:02:15.861107 systemd-logind[1366]: New session 1 of user core. Oct 2 21:02:15.901823 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 21:02:15.903530 systemd[1]: Starting user@500.service... Oct 2 21:02:15.940719 (systemd)[1486]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:02:16.205188 systemd[1486]: Queued start job for default target default.target. Oct 2 21:02:16.206332 systemd[1486]: Reached target paths.target. Oct 2 21:02:16.206456 systemd[1486]: Reached target sockets.target. Oct 2 21:02:16.206531 systemd[1486]: Reached target timers.target. Oct 2 21:02:16.206592 systemd[1486]: Reached target basic.target. Oct 2 21:02:16.206706 systemd[1486]: Reached target default.target. Oct 2 21:02:16.206770 systemd[1]: Started user@500.service. Oct 2 21:02:16.207277 systemd[1486]: Startup finished in 258ms. Oct 2 21:02:16.207620 systemd[1]: Started session-1.scope. Oct 2 21:02:16.814642 login[1482]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 21:02:16.818734 systemd-logind[1366]: New session 2 of user core. Oct 2 21:02:16.819143 systemd[1]: Started session-2.scope. Oct 2 21:02:21.019697 waagent[1477]: 2023-10-02T21:02:21.019585Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 21:02:21.026218 waagent[1477]: 2023-10-02T21:02:21.026144Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 21:02:21.030631 waagent[1477]: 2023-10-02T21:02:21.030572Z INFO Daemon Daemon Python: 3.9.16 Oct 2 21:02:21.038131 waagent[1477]: 2023-10-02T21:02:21.035006Z INFO Daemon Daemon Run daemon Oct 2 21:02:21.039162 waagent[1477]: 2023-10-02T21:02:21.039086Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 21:02:21.058996 waagent[1477]: 2023-10-02T21:02:21.058862Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 21:02:21.074377 waagent[1477]: 2023-10-02T21:02:21.074250Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 21:02:21.083767 waagent[1477]: 2023-10-02T21:02:21.083701Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 21:02:21.088673 waagent[1477]: 2023-10-02T21:02:21.088613Z INFO Daemon Daemon Using waagent for provisioning Oct 2 21:02:21.094250 waagent[1477]: 2023-10-02T21:02:21.094189Z INFO Daemon Daemon Activate resource disk Oct 2 21:02:21.098848 waagent[1477]: 2023-10-02T21:02:21.098789Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 21:02:21.112844 waagent[1477]: 2023-10-02T21:02:21.112781Z INFO Daemon Daemon Found device: None Oct 2 21:02:21.117287 waagent[1477]: 2023-10-02T21:02:21.117227Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 21:02:21.125422 waagent[1477]: 2023-10-02T21:02:21.125362Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 21:02:21.137277 waagent[1477]: 2023-10-02T21:02:21.137214Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 21:02:21.143041 waagent[1477]: 2023-10-02T21:02:21.142981Z INFO Daemon Daemon Running default provisioning handler Oct 2 21:02:21.159039 waagent[1477]: 2023-10-02T21:02:21.158920Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 21:02:21.174305 waagent[1477]: 2023-10-02T21:02:21.174178Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 21:02:21.183573 waagent[1477]: 2023-10-02T21:02:21.183509Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 21:02:21.188723 waagent[1477]: 2023-10-02T21:02:21.188664Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 21:02:21.215104 waagent[1477]: 2023-10-02T21:02:21.214988Z INFO Daemon Daemon Successfully mounted dvd Oct 2 21:02:21.332395 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 21:02:21.367705 waagent[1477]: 2023-10-02T21:02:21.367567Z INFO Daemon Daemon Detect protocol endpoint Oct 2 21:02:21.372772 waagent[1477]: 2023-10-02T21:02:21.372706Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 21:02:21.378467 waagent[1477]: 2023-10-02T21:02:21.378403Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 21:02:21.384896 waagent[1477]: 2023-10-02T21:02:21.384837Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 21:02:21.390294 waagent[1477]: 2023-10-02T21:02:21.390236Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 21:02:21.395403 waagent[1477]: 2023-10-02T21:02:21.395342Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 21:02:21.654915 waagent[1477]: 2023-10-02T21:02:21.654847Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 21:02:21.661982 waagent[1477]: 2023-10-02T21:02:21.661935Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 21:02:21.667226 waagent[1477]: 2023-10-02T21:02:21.667165Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 21:02:22.425659 waagent[1477]: 2023-10-02T21:02:22.425504Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 21:02:22.440195 waagent[1477]: 2023-10-02T21:02:22.440103Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 21:02:22.445801 waagent[1477]: 2023-10-02T21:02:22.445738Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 21:02:22.534293 waagent[1477]: 2023-10-02T21:02:22.534160Z INFO Daemon Daemon Found private key matching thumbprint 1CC36410B299D668C7AA33029A0254E102F0BB5B Oct 2 21:02:22.542503 waagent[1477]: 2023-10-02T21:02:22.542431Z INFO Daemon Daemon Certificate with thumbprint D2B6B97C1D3A149F0CF46F05322DE205E599987F has no matching private key. Oct 2 21:02:22.551625 waagent[1477]: 2023-10-02T21:02:22.551559Z INFO Daemon Daemon Fetch goal state completed Oct 2 21:02:22.599156 waagent[1477]: 2023-10-02T21:02:22.599077Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: a286b653-ee73-4f86-b7b9-e907136c6e81 New eTag: 7513532637615443157] Oct 2 21:02:22.609732 waagent[1477]: 2023-10-02T21:02:22.609663Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 21:02:22.624838 waagent[1477]: 2023-10-02T21:02:22.624723Z INFO Daemon Daemon Starting provisioning Oct 2 21:02:22.629809 waagent[1477]: 2023-10-02T21:02:22.629741Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 21:02:22.634511 waagent[1477]: 2023-10-02T21:02:22.634452Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-4ade0e9e10] Oct 2 21:02:22.695746 waagent[1477]: 2023-10-02T21:02:22.695615Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-4ade0e9e10] Oct 2 21:02:22.702319 waagent[1477]: 2023-10-02T21:02:22.702235Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 21:02:22.708703 waagent[1477]: 2023-10-02T21:02:22.708634Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 21:02:22.729233 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 21:02:22.729405 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 21:02:22.729465 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 21:02:22.729698 systemd[1]: Stopping systemd-networkd.service... Oct 2 21:02:22.734166 systemd-networkd[1246]: eth0: DHCPv6 lease lost Oct 2 21:02:22.735779 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 21:02:22.735956 systemd[1]: Stopped systemd-networkd.service. Oct 2 21:02:22.738509 systemd[1]: Starting systemd-networkd.service... Oct 2 21:02:22.770440 systemd-networkd[1532]: enP24727s1: Link UP Oct 2 21:02:22.770451 systemd-networkd[1532]: enP24727s1: Gained carrier Oct 2 21:02:22.771529 systemd-networkd[1532]: eth0: Link UP Oct 2 21:02:22.771539 systemd-networkd[1532]: eth0: Gained carrier Oct 2 21:02:22.771848 systemd-networkd[1532]: lo: Link UP Oct 2 21:02:22.771858 systemd-networkd[1532]: lo: Gained carrier Oct 2 21:02:22.772086 systemd-networkd[1532]: eth0: Gained IPv6LL Oct 2 21:02:22.772311 systemd-networkd[1532]: Enumeration completed Oct 2 21:02:22.772407 systemd[1]: Started systemd-networkd.service. Oct 2 21:02:22.774069 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 21:02:22.774620 systemd-networkd[1532]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 21:02:22.778913 waagent[1477]: 2023-10-02T21:02:22.778705Z INFO Daemon Daemon Create user account if not exists Oct 2 21:02:22.784713 waagent[1477]: 2023-10-02T21:02:22.784634Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 21:02:22.790269 waagent[1477]: 2023-10-02T21:02:22.790204Z INFO Daemon Daemon Configure sudoer Oct 2 21:02:22.794889 waagent[1477]: 2023-10-02T21:02:22.794787Z INFO Daemon Daemon Configure sshd Oct 2 21:02:22.799059 waagent[1477]: 2023-10-02T21:02:22.798998Z INFO Daemon Daemon Deploy ssh public key. Oct 2 21:02:22.799186 systemd-networkd[1532]: eth0: DHCPv4 address 10.200.20.10/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 21:02:22.814874 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 21:02:22.859559 waagent[1477]: 2023-10-02T21:02:22.859426Z INFO Daemon Daemon Decode custom data Oct 2 21:02:22.864285 waagent[1477]: 2023-10-02T21:02:22.864219Z INFO Daemon Daemon Save custom data Oct 2 21:02:24.035422 waagent[1477]: 2023-10-02T21:02:24.035336Z INFO Daemon Daemon Provisioning complete Oct 2 21:02:24.055654 waagent[1477]: 2023-10-02T21:02:24.055590Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 21:02:24.063764 waagent[1477]: 2023-10-02T21:02:24.063693Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 21:02:24.077373 waagent[1477]: 2023-10-02T21:02:24.077300Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 21:02:24.377482 waagent[1541]: 2023-10-02T21:02:24.377392Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 21:02:24.378568 waagent[1541]: 2023-10-02T21:02:24.378515Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:02:24.378811 waagent[1541]: 2023-10-02T21:02:24.378763Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:02:24.391080 waagent[1541]: 2023-10-02T21:02:24.391016Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 21:02:24.391378 waagent[1541]: 2023-10-02T21:02:24.391328Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 21:02:24.469092 waagent[1541]: 2023-10-02T21:02:24.468965Z INFO ExtHandler ExtHandler Found private key matching thumbprint 1CC36410B299D668C7AA33029A0254E102F0BB5B Oct 2 21:02:24.469488 waagent[1541]: 2023-10-02T21:02:24.469436Z INFO ExtHandler ExtHandler Certificate with thumbprint D2B6B97C1D3A149F0CF46F05322DE205E599987F has no matching private key. Oct 2 21:02:24.469794 waagent[1541]: 2023-10-02T21:02:24.469745Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 21:02:24.482513 waagent[1541]: 2023-10-02T21:02:24.482464Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 4b7a9241-370a-4207-b0e7-6a98b88d7ff7 New eTag: 7513532637615443157] Oct 2 21:02:24.483246 waagent[1541]: 2023-10-02T21:02:24.483189Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 21:02:24.554583 waagent[1541]: 2023-10-02T21:02:24.554448Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 21:02:24.564646 waagent[1541]: 2023-10-02T21:02:24.564572Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1541 Oct 2 21:02:24.568519 waagent[1541]: 2023-10-02T21:02:24.568459Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 21:02:24.569999 waagent[1541]: 2023-10-02T21:02:24.569943Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 21:02:24.676568 waagent[1541]: 2023-10-02T21:02:24.676454Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 21:02:24.677113 waagent[1541]: 2023-10-02T21:02:24.677058Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 21:02:24.687864 waagent[1541]: 2023-10-02T21:02:24.687814Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 21:02:24.688490 waagent[1541]: 2023-10-02T21:02:24.688435Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 21:02:24.689765 waagent[1541]: 2023-10-02T21:02:24.689703Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 21:02:24.691200 waagent[1541]: 2023-10-02T21:02:24.691134Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 21:02:24.691476 waagent[1541]: 2023-10-02T21:02:24.691408Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:02:24.692219 waagent[1541]: 2023-10-02T21:02:24.692112Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:02:24.692818 waagent[1541]: 2023-10-02T21:02:24.692754Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 21:02:24.693151 waagent[1541]: 2023-10-02T21:02:24.693072Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 21:02:24.693151 waagent[1541]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 21:02:24.693151 waagent[1541]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 21:02:24.693151 waagent[1541]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 21:02:24.693151 waagent[1541]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:02:24.693151 waagent[1541]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:02:24.693151 waagent[1541]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:02:24.695388 waagent[1541]: 2023-10-02T21:02:24.695236Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 21:02:24.695832 waagent[1541]: 2023-10-02T21:02:24.695757Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:02:24.696417 waagent[1541]: 2023-10-02T21:02:24.696348Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:02:24.696986 waagent[1541]: 2023-10-02T21:02:24.696915Z INFO EnvHandler ExtHandler Configure routes Oct 2 21:02:24.697172 waagent[1541]: 2023-10-02T21:02:24.697093Z INFO EnvHandler ExtHandler Gateway:None Oct 2 21:02:24.697376 waagent[1541]: 2023-10-02T21:02:24.697311Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 21:02:24.697548 waagent[1541]: 2023-10-02T21:02:24.697483Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 21:02:24.697625 waagent[1541]: 2023-10-02T21:02:24.697575Z INFO EnvHandler ExtHandler Routes:None Oct 2 21:02:24.698729 waagent[1541]: 2023-10-02T21:02:24.698545Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 21:02:24.698901 waagent[1541]: 2023-10-02T21:02:24.698831Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 21:02:24.700898 waagent[1541]: 2023-10-02T21:02:24.700827Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 21:02:24.709031 waagent[1541]: 2023-10-02T21:02:24.708964Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 21:02:24.711941 waagent[1541]: 2023-10-02T21:02:24.711781Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 21:02:24.714872 waagent[1541]: 2023-10-02T21:02:24.714744Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 21:02:24.741526 waagent[1541]: 2023-10-02T21:02:24.741395Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1532' Oct 2 21:02:24.760470 waagent[1541]: 2023-10-02T21:02:24.760403Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 21:02:24.828310 waagent[1541]: 2023-10-02T21:02:24.828177Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 21:02:24.828310 waagent[1541]: Executing ['ip', '-a', '-o', 'link']: Oct 2 21:02:24.828310 waagent[1541]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 21:02:24.828310 waagent[1541]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:78:18:28 brd ff:ff:ff:ff:ff:ff Oct 2 21:02:24.828310 waagent[1541]: 3: enP24727s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:78:18:28 brd ff:ff:ff:ff:ff:ff\ altname enP24727p0s2 Oct 2 21:02:24.828310 waagent[1541]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 21:02:24.828310 waagent[1541]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 21:02:24.828310 waagent[1541]: 2: eth0 inet 10.200.20.10/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 21:02:24.828310 waagent[1541]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 21:02:24.828310 waagent[1541]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 21:02:24.828310 waagent[1541]: 2: eth0 inet6 fe80::222:48ff:fe78:1828/64 scope link \ valid_lft forever preferred_lft forever Oct 2 21:02:24.981263 waagent[1541]: 2023-10-02T21:02:24.981162Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.9.1.1 -- exiting Oct 2 21:02:25.080406 waagent[1477]: 2023-10-02T21:02:25.080287Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 21:02:25.084045 waagent[1477]: 2023-10-02T21:02:25.083993Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.9.1.1 to be the latest agent Oct 2 21:02:26.228306 waagent[1573]: 2023-10-02T21:02:26.228203Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.9.1.1) Oct 2 21:02:26.229363 waagent[1573]: 2023-10-02T21:02:26.229302Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 21:02:26.229596 waagent[1573]: 2023-10-02T21:02:26.229545Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 21:02:26.239875 waagent[1573]: 2023-10-02T21:02:26.239765Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 21:02:26.240434 waagent[1573]: 2023-10-02T21:02:26.240373Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:02:26.240700 waagent[1573]: 2023-10-02T21:02:26.240649Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:02:26.253813 waagent[1573]: 2023-10-02T21:02:26.253737Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 21:02:26.262530 waagent[1573]: 2023-10-02T21:02:26.262470Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 21:02:26.263743 waagent[1573]: 2023-10-02T21:02:26.263681Z INFO ExtHandler Oct 2 21:02:26.264005 waagent[1573]: 2023-10-02T21:02:26.263952Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 8cfc794a-5c53-4349-b969-a6d6a90abd4a eTag: 7513532637615443157 source: Fabric] Oct 2 21:02:26.264878 waagent[1573]: 2023-10-02T21:02:26.264817Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 21:02:26.266300 waagent[1573]: 2023-10-02T21:02:26.266235Z INFO ExtHandler Oct 2 21:02:26.266564 waagent[1573]: 2023-10-02T21:02:26.266509Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 21:02:26.272718 waagent[1573]: 2023-10-02T21:02:26.272666Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 21:02:26.273331 waagent[1573]: 2023-10-02T21:02:26.273276Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 21:02:26.290874 waagent[1573]: 2023-10-02T21:02:26.290815Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 21:02:26.373347 waagent[1573]: 2023-10-02T21:02:26.373203Z INFO ExtHandler Downloaded certificate {'thumbprint': 'D2B6B97C1D3A149F0CF46F05322DE205E599987F', 'hasPrivateKey': False} Oct 2 21:02:26.374607 waagent[1573]: 2023-10-02T21:02:26.374546Z INFO ExtHandler Downloaded certificate {'thumbprint': '1CC36410B299D668C7AA33029A0254E102F0BB5B', 'hasPrivateKey': True} Oct 2 21:02:26.375821 waagent[1573]: 2023-10-02T21:02:26.375755Z INFO ExtHandler Fetch goal state completed Oct 2 21:02:26.398086 waagent[1573]: 2023-10-02T21:02:26.397999Z INFO ExtHandler ExtHandler WALinuxAgent-2.9.1.1 running as process 1573 Oct 2 21:02:26.401957 waagent[1573]: 2023-10-02T21:02:26.401875Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 21:02:26.403665 waagent[1573]: 2023-10-02T21:02:26.403598Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 21:02:26.410484 waagent[1573]: 2023-10-02T21:02:26.410430Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 21:02:26.411015 waagent[1573]: 2023-10-02T21:02:26.410954Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 21:02:26.422438 waagent[1573]: 2023-10-02T21:02:26.422382Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 21:02:26.423090 waagent[1573]: 2023-10-02T21:02:26.423028Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 21:02:26.431453 waagent[1573]: 2023-10-02T21:02:26.431346Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. Oct 2 21:02:26.435411 waagent[1573]: 2023-10-02T21:02:26.435349Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 21:02:26.437102 waagent[1573]: 2023-10-02T21:02:26.437024Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 21:02:26.437513 waagent[1573]: 2023-10-02T21:02:26.437432Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:02:26.437967 waagent[1573]: 2023-10-02T21:02:26.437906Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:02:26.438540 waagent[1573]: 2023-10-02T21:02:26.438478Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 21:02:26.438838 waagent[1573]: 2023-10-02T21:02:26.438779Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 21:02:26.438838 waagent[1573]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 21:02:26.438838 waagent[1573]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 21:02:26.438838 waagent[1573]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 21:02:26.438838 waagent[1573]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:02:26.438838 waagent[1573]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:02:26.438838 waagent[1573]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:02:26.441205 waagent[1573]: 2023-10-02T21:02:26.441003Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 21:02:26.441481 waagent[1573]: 2023-10-02T21:02:26.441405Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:02:26.442336 waagent[1573]: 2023-10-02T21:02:26.442264Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:02:26.442959 waagent[1573]: 2023-10-02T21:02:26.442711Z INFO EnvHandler ExtHandler Configure routes Oct 2 21:02:26.443103 waagent[1573]: 2023-10-02T21:02:26.443047Z INFO EnvHandler ExtHandler Gateway:None Oct 2 21:02:26.443246 waagent[1573]: 2023-10-02T21:02:26.443199Z INFO EnvHandler ExtHandler Routes:None Oct 2 21:02:26.444332 waagent[1573]: 2023-10-02T21:02:26.444256Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 21:02:26.446237 waagent[1573]: 2023-10-02T21:02:26.446053Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 21:02:26.447010 waagent[1573]: 2023-10-02T21:02:26.446952Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 21:02:26.447100 waagent[1573]: 2023-10-02T21:02:26.446859Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 21:02:26.450992 waagent[1573]: 2023-10-02T21:02:26.450924Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 21:02:26.465989 waagent[1573]: 2023-10-02T21:02:26.465886Z INFO ExtHandler ExtHandler No requested version specified, checking for all versions for agent update (family: Prod) Oct 2 21:02:26.467437 waagent[1573]: 2023-10-02T21:02:26.467357Z INFO ExtHandler ExtHandler Downloading manifest Oct 2 21:02:26.477518 waagent[1573]: 2023-10-02T21:02:26.477433Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 21:02:26.477518 waagent[1573]: Executing ['ip', '-a', '-o', 'link']: Oct 2 21:02:26.477518 waagent[1573]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 21:02:26.477518 waagent[1573]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:78:18:28 brd ff:ff:ff:ff:ff:ff Oct 2 21:02:26.477518 waagent[1573]: 3: enP24727s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:78:18:28 brd ff:ff:ff:ff:ff:ff\ altname enP24727p0s2 Oct 2 21:02:26.477518 waagent[1573]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 21:02:26.477518 waagent[1573]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 21:02:26.477518 waagent[1573]: 2: eth0 inet 10.200.20.10/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 21:02:26.477518 waagent[1573]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 21:02:26.477518 waagent[1573]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 21:02:26.477518 waagent[1573]: 2: eth0 inet6 fe80::222:48ff:fe78:1828/64 scope link \ valid_lft forever preferred_lft forever Oct 2 21:02:26.504113 waagent[1573]: 2023-10-02T21:02:26.504013Z INFO ExtHandler ExtHandler Oct 2 21:02:26.504440 waagent[1573]: 2023-10-02T21:02:26.504377Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: f0906045-c449-4bbd-98ac-a4ed61da168e correlation dbea648f-72b3-4dd8-a597-5f51a668651d created: 2023-10-02T21:00:41.403458Z] Oct 2 21:02:26.505461 waagent[1573]: 2023-10-02T21:02:26.505398Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 21:02:26.507481 waagent[1573]: 2023-10-02T21:02:26.507420Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 3 ms] Oct 2 21:02:26.527512 waagent[1573]: 2023-10-02T21:02:26.527448Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 21:02:26.554434 waagent[1573]: 2023-10-02T21:02:26.554350Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.9.1.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 88A2929B-50A4-43D1-9408-C5637889D901;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 21:02:26.703963 waagent[1573]: 2023-10-02T21:02:26.703838Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules. Current Firewall rules: Oct 2 21:02:26.703963 waagent[1573]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:02:26.703963 waagent[1573]: pkts bytes target prot opt in out source destination Oct 2 21:02:26.703963 waagent[1573]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:02:26.703963 waagent[1573]: pkts bytes target prot opt in out source destination Oct 2 21:02:26.703963 waagent[1573]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:02:26.703963 waagent[1573]: pkts bytes target prot opt in out source destination Oct 2 21:02:26.703963 waagent[1573]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 21:02:26.703963 waagent[1573]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 21:02:26.703963 waagent[1573]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 21:02:26.714539 waagent[1573]: 2023-10-02T21:02:26.714413Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 21:02:26.714539 waagent[1573]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:02:26.714539 waagent[1573]: pkts bytes target prot opt in out source destination Oct 2 21:02:26.714539 waagent[1573]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:02:26.714539 waagent[1573]: pkts bytes target prot opt in out source destination Oct 2 21:02:26.714539 waagent[1573]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:02:26.714539 waagent[1573]: pkts bytes target prot opt in out source destination Oct 2 21:02:26.714539 waagent[1573]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 21:02:26.714539 waagent[1573]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 21:02:26.714539 waagent[1573]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 21:02:26.715477 waagent[1573]: 2023-10-02T21:02:26.715423Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 21:02:48.619988 systemd[1]: Created slice system-sshd.slice. Oct 2 21:02:48.621380 systemd[1]: Started sshd@0-10.200.20.10:22-10.200.12.6:56682.service. Oct 2 21:02:49.260407 sshd[1621]: Accepted publickey for core from 10.200.12.6 port 56682 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:02:49.278195 sshd[1621]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:02:49.281983 systemd-logind[1366]: New session 3 of user core. Oct 2 21:02:49.282726 systemd[1]: Started session-3.scope. Oct 2 21:02:49.636818 systemd[1]: Started sshd@1-10.200.20.10:22-10.200.12.6:56684.service. Oct 2 21:02:50.092305 sshd[1626]: Accepted publickey for core from 10.200.12.6 port 56684 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:02:50.093931 sshd[1626]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:02:50.097790 systemd-logind[1366]: New session 4 of user core. Oct 2 21:02:50.098221 systemd[1]: Started session-4.scope. Oct 2 21:02:50.422174 sshd[1626]: pam_unix(sshd:session): session closed for user core Oct 2 21:02:50.424783 systemd-logind[1366]: Session 4 logged out. Waiting for processes to exit. Oct 2 21:02:50.424863 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 21:02:50.425887 systemd[1]: sshd@1-10.200.20.10:22-10.200.12.6:56684.service: Deactivated successfully. Oct 2 21:02:50.426585 systemd-logind[1366]: Removed session 4. Oct 2 21:02:50.492561 systemd[1]: Started sshd@2-10.200.20.10:22-10.200.12.6:56690.service. Oct 2 21:02:50.652138 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Oct 2 21:02:50.915180 sshd[1632]: Accepted publickey for core from 10.200.12.6 port 56690 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:02:50.916169 sshd[1632]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:02:50.920114 systemd-logind[1366]: New session 5 of user core. Oct 2 21:02:50.920562 systemd[1]: Started session-5.scope. Oct 2 21:02:51.216619 sshd[1632]: pam_unix(sshd:session): session closed for user core Oct 2 21:02:51.219362 systemd[1]: sshd@2-10.200.20.10:22-10.200.12.6:56690.service: Deactivated successfully. Oct 2 21:02:51.220012 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 21:02:51.220535 systemd-logind[1366]: Session 5 logged out. Waiting for processes to exit. Oct 2 21:02:51.221331 systemd-logind[1366]: Removed session 5. Oct 2 21:02:51.294241 systemd[1]: Started sshd@3-10.200.20.10:22-10.200.12.6:56700.service. Oct 2 21:02:51.757927 sshd[1638]: Accepted publickey for core from 10.200.12.6 port 56700 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:02:51.759482 sshd[1638]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:02:51.763169 systemd-logind[1366]: New session 6 of user core. Oct 2 21:02:51.763662 systemd[1]: Started session-6.scope. Oct 2 21:02:52.093881 sshd[1638]: pam_unix(sshd:session): session closed for user core Oct 2 21:02:52.096835 systemd-logind[1366]: Session 6 logged out. Waiting for processes to exit. Oct 2 21:02:52.096916 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 21:02:52.097960 systemd[1]: sshd@3-10.200.20.10:22-10.200.12.6:56700.service: Deactivated successfully. Oct 2 21:02:52.098654 systemd-logind[1366]: Removed session 6. Oct 2 21:02:52.169748 systemd[1]: Started sshd@4-10.200.20.10:22-10.200.12.6:56712.service. Oct 2 21:02:52.625014 sshd[1644]: Accepted publickey for core from 10.200.12.6 port 56712 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:02:52.626586 sshd[1644]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:02:52.630652 systemd-logind[1366]: New session 7 of user core. Oct 2 21:02:52.631017 systemd[1]: Started session-7.scope. Oct 2 21:02:53.212046 sudo[1647]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 21:02:53.212579 sudo[1647]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:02:53.266291 dbus-daemon[1354]: avc: received setenforce notice (enforcing=1) Oct 2 21:02:53.268017 sudo[1647]: pam_unix(sudo:session): session closed for user root Oct 2 21:02:53.358663 sshd[1644]: pam_unix(sshd:session): session closed for user core Oct 2 21:02:53.361812 systemd-logind[1366]: Session 7 logged out. Waiting for processes to exit. Oct 2 21:02:53.361941 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 21:02:53.362487 systemd[1]: sshd@4-10.200.20.10:22-10.200.12.6:56712.service: Deactivated successfully. Oct 2 21:02:53.363486 systemd-logind[1366]: Removed session 7. Oct 2 21:02:53.428416 systemd[1]: Started sshd@5-10.200.20.10:22-10.200.12.6:56714.service. Oct 2 21:02:53.849965 sshd[1651]: Accepted publickey for core from 10.200.12.6 port 56714 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:02:53.851577 sshd[1651]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:02:53.855167 systemd-logind[1366]: New session 8 of user core. Oct 2 21:02:53.855902 systemd[1]: Started session-8.scope. Oct 2 21:02:54.091763 sudo[1655]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 21:02:54.091955 sudo[1655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:02:54.095037 sudo[1655]: pam_unix(sudo:session): session closed for user root Oct 2 21:02:54.100696 sudo[1654]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 21:02:54.101488 sudo[1654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:02:54.112307 systemd[1]: Stopping audit-rules.service... Oct 2 21:02:54.113000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 21:02:54.115418 auditctl[1658]: No rules Oct 2 21:02:54.117951 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:02:54.118007 kernel: audit: type=1305 audit(1696280574.113:175): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 21:02:54.118363 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 21:02:54.118522 systemd[1]: Stopped audit-rules.service. Oct 2 21:02:54.119900 systemd[1]: Starting audit-rules.service... Oct 2 21:02:54.113000 audit[1658]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff98078f0 a2=420 a3=0 items=0 ppid=1 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:54.151532 kernel: audit: type=1300 audit(1696280574.113:175): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff98078f0 a2=420 a3=0 items=0 ppid=1 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:54.151705 kernel: audit: type=1327 audit(1696280574.113:175): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 21:02:54.113000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 21:02:54.117000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:54.173987 kernel: audit: type=1131 audit(1696280574.117:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:54.187364 augenrules[1675]: No rules Oct 2 21:02:54.188212 systemd[1]: Finished audit-rules.service. Oct 2 21:02:54.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:54.204622 sudo[1654]: pam_unix(sudo:session): session closed for user root Oct 2 21:02:54.203000 audit[1654]: USER_END pid=1654 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:02:54.222803 kernel: audit: type=1130 audit(1696280574.187:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:54.222865 kernel: audit: type=1106 audit(1696280574.203:178): pid=1654 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:02:54.203000 audit[1654]: CRED_DISP pid=1654 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:02:54.239211 kernel: audit: type=1104 audit(1696280574.203:179): pid=1654 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:02:54.287220 sshd[1651]: pam_unix(sshd:session): session closed for user core Oct 2 21:02:54.287000 audit[1651]: USER_END pid=1651 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:54.310543 systemd[1]: sshd@5-10.200.20.10:22-10.200.12.6:56714.service: Deactivated successfully. Oct 2 21:02:54.287000 audit[1651]: CRED_DISP pid=1651 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:54.328831 kernel: audit: type=1106 audit(1696280574.287:180): pid=1651 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:54.328896 kernel: audit: type=1104 audit(1696280574.287:181): pid=1651 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:54.311276 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 21:02:54.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.10:22-10.200.12.6:56714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:54.329628 systemd-logind[1366]: Session 8 logged out. Waiting for processes to exit. Oct 2 21:02:54.347510 systemd-logind[1366]: Removed session 8. Oct 2 21:02:54.348171 kernel: audit: type=1131 audit(1696280574.309:182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.10:22-10.200.12.6:56714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:54.357678 systemd[1]: Started sshd@6-10.200.20.10:22-10.200.12.6:56728.service. Oct 2 21:02:54.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.10:22-10.200.12.6:56728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:54.780000 audit[1681]: USER_ACCT pid=1681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:54.781790 sshd[1681]: Accepted publickey for core from 10.200.12.6 port 56728 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:02:54.782000 audit[1681]: CRED_ACQ pid=1681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:54.782000 audit[1681]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc29e4850 a2=3 a3=1 items=0 ppid=1 pid=1681 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:54.782000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:02:54.783829 sshd[1681]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:02:54.787634 systemd-logind[1366]: New session 9 of user core. Oct 2 21:02:54.788052 systemd[1]: Started session-9.scope. Oct 2 21:02:54.790000 audit[1681]: USER_START pid=1681 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:54.793000 audit[1683]: CRED_ACQ pid=1683 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:02:55.023000 audit[1684]: USER_ACCT pid=1684 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:02:55.024987 sudo[1684]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 21:02:55.024000 audit[1684]: CRED_REFR pid=1684 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:02:55.025510 sudo[1684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:02:55.026000 audit[1684]: USER_START pid=1684 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:02:55.721890 systemd[1]: Starting docker.service... Oct 2 21:02:55.773429 env[1699]: time="2023-10-02T21:02:55.773375509Z" level=info msg="Starting up" Oct 2 21:02:55.774858 env[1699]: time="2023-10-02T21:02:55.774834790Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 21:02:55.774951 env[1699]: time="2023-10-02T21:02:55.774938190Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 21:02:55.775023 env[1699]: time="2023-10-02T21:02:55.775008470Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 21:02:55.775079 env[1699]: time="2023-10-02T21:02:55.775068070Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 21:02:55.777569 env[1699]: time="2023-10-02T21:02:55.777547352Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 21:02:55.777656 env[1699]: time="2023-10-02T21:02:55.777643872Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 21:02:55.777712 env[1699]: time="2023-10-02T21:02:55.777697352Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 21:02:55.777757 env[1699]: time="2023-10-02T21:02:55.777745592Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 21:02:55.784552 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport15951701-merged.mount: Deactivated successfully. Oct 2 21:02:55.919185 env[1699]: time="2023-10-02T21:02:55.919145560Z" level=info msg="Loading containers: start." Oct 2 21:02:56.007000 audit[1726]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=1726 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.007000 audit[1726]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffdc308ca0 a2=0 a3=1 items=0 ppid=1699 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.007000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 21:02:56.010000 audit[1728]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=1728 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.010000 audit[1728]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe6e9b8c0 a2=0 a3=1 items=0 ppid=1699 pid=1728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.010000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 21:02:56.013000 audit[1730]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=1730 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.013000 audit[1730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff1e68000 a2=0 a3=1 items=0 ppid=1699 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.013000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 21:02:56.015000 audit[1732]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1732 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.015000 audit[1732]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffc4c7c80 a2=0 a3=1 items=0 ppid=1699 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.015000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 21:02:56.018000 audit[1734]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1734 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.018000 audit[1734]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe50693f0 a2=0 a3=1 items=0 ppid=1699 pid=1734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.018000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 21:02:56.021000 audit[1736]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1736 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.021000 audit[1736]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd85d4830 a2=0 a3=1 items=0 ppid=1699 pid=1736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.021000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 21:02:56.039000 audit[1738]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1738 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.039000 audit[1738]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe7059730 a2=0 a3=1 items=0 ppid=1699 pid=1738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.039000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 21:02:56.042000 audit[1740]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1740 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.042000 audit[1740]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffeaf16640 a2=0 a3=1 items=0 ppid=1699 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.042000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 21:02:56.045000 audit[1742]: NETFILTER_CFG table=filter:13 family=2 entries=2 op=nft_register_chain pid=1742 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.045000 audit[1742]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffe96b93b0 a2=0 a3=1 items=0 ppid=1699 pid=1742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.045000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:02:56.065000 audit[1746]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_unregister_rule pid=1746 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.065000 audit[1746]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffffc59dae0 a2=0 a3=1 items=0 ppid=1699 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.065000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:02:56.066000 audit[1747]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1747 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.066000 audit[1747]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff52c8370 a2=0 a3=1 items=0 ppid=1699 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.066000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:02:56.111149 kernel: Initializing XFRM netlink socket Oct 2 21:02:56.209990 env[1699]: time="2023-10-02T21:02:56.209957612Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 21:02:56.298000 audit[1755]: NETFILTER_CFG table=nat:16 family=2 entries=2 op=nft_register_chain pid=1755 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.298000 audit[1755]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffeff121d0 a2=0 a3=1 items=0 ppid=1699 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.298000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 21:02:56.326000 audit[1758]: NETFILTER_CFG table=nat:17 family=2 entries=1 op=nft_register_rule pid=1758 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.326000 audit[1758]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffe254f350 a2=0 a3=1 items=0 ppid=1699 pid=1758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.326000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 21:02:56.330000 audit[1761]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_register_rule pid=1761 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.330000 audit[1761]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc705d6b0 a2=0 a3=1 items=0 ppid=1699 pid=1761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.330000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 21:02:56.333000 audit[1763]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1763 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.333000 audit[1763]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffdcb07110 a2=0 a3=1 items=0 ppid=1699 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.333000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 21:02:56.335000 audit[1765]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1765 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.335000 audit[1765]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffe3b23040 a2=0 a3=1 items=0 ppid=1699 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.335000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 21:02:56.338000 audit[1767]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1767 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.338000 audit[1767]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffc1d98e80 a2=0 a3=1 items=0 ppid=1699 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.338000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 21:02:56.341000 audit[1769]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1769 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.341000 audit[1769]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffdcacbb50 a2=0 a3=1 items=0 ppid=1699 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.341000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 21:02:56.344000 audit[1771]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1771 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.344000 audit[1771]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffeec44ec0 a2=0 a3=1 items=0 ppid=1699 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.344000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 21:02:56.346000 audit[1773]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1773 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.346000 audit[1773]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=fffff2666960 a2=0 a3=1 items=0 ppid=1699 pid=1773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.346000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 21:02:56.349000 audit[1775]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1775 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.349000 audit[1775]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=fffff7477310 a2=0 a3=1 items=0 ppid=1699 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.349000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 21:02:56.352000 audit[1777]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1777 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.352000 audit[1777]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffcc136f00 a2=0 a3=1 items=0 ppid=1699 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.352000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 21:02:56.353811 systemd-networkd[1532]: docker0: Link UP Oct 2 21:02:56.372000 audit[1781]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_unregister_rule pid=1781 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.372000 audit[1781]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd563a460 a2=0 a3=1 items=0 ppid=1699 pid=1781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.372000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:02:56.374000 audit[1782]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1782 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:02:56.374000 audit[1782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffefcdbea0 a2=0 a3=1 items=0 ppid=1699 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:02:56.374000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:02:56.375639 env[1699]: time="2023-10-02T21:02:56.375612508Z" level=info msg="Loading containers: done." Oct 2 21:02:56.387352 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2705793231-merged.mount: Deactivated successfully. Oct 2 21:02:56.423224 env[1699]: time="2023-10-02T21:02:56.423185216Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 21:02:56.423576 env[1699]: time="2023-10-02T21:02:56.423558256Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 21:02:56.423734 env[1699]: time="2023-10-02T21:02:56.423720656Z" level=info msg="Daemon has completed initialization" Oct 2 21:02:56.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:56.460317 systemd[1]: Started docker.service. Oct 2 21:02:56.465042 env[1699]: time="2023-10-02T21:02:56.464973080Z" level=info msg="API listen on /run/docker.sock" Oct 2 21:02:56.486598 systemd[1]: Reloading. Oct 2 21:02:56.569421 /usr/lib/systemd/system-generators/torcx-generator[1829]: time="2023-10-02T21:02:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:02:56.569452 /usr/lib/systemd/system-generators/torcx-generator[1829]: time="2023-10-02T21:02:56Z" level=info msg="torcx already run" Oct 2 21:02:56.681352 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:02:56.681540 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:02:56.696656 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:02:56.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.762000 audit: BPF prog-id=38 op=LOAD Oct 2 21:02:56.762000 audit: BPF prog-id=37 op=UNLOAD Oct 2 21:02:56.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.763000 audit: BPF prog-id=39 op=LOAD Oct 2 21:02:56.763000 audit: BPF prog-id=27 op=UNLOAD Oct 2 21:02:56.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit: BPF prog-id=40 op=LOAD Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.764000 audit: BPF prog-id=41 op=LOAD Oct 2 21:02:56.764000 audit: BPF prog-id=28 op=UNLOAD Oct 2 21:02:56.765000 audit: BPF prog-id=29 op=UNLOAD Oct 2 21:02:56.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.766000 audit: BPF prog-id=42 op=LOAD Oct 2 21:02:56.766000 audit: BPF prog-id=31 op=UNLOAD Oct 2 21:02:56.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit: BPF prog-id=43 op=LOAD Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit: BPF prog-id=44 op=LOAD Oct 2 21:02:56.768000 audit: BPF prog-id=24 op=UNLOAD Oct 2 21:02:56.768000 audit: BPF prog-id=25 op=UNLOAD Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.768000 audit: BPF prog-id=45 op=LOAD Oct 2 21:02:56.768000 audit: BPF prog-id=21 op=UNLOAD Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit: BPF prog-id=46 op=LOAD Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit: BPF prog-id=47 op=LOAD Oct 2 21:02:56.769000 audit: BPF prog-id=22 op=UNLOAD Oct 2 21:02:56.769000 audit: BPF prog-id=23 op=UNLOAD Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.770000 audit: BPF prog-id=48 op=LOAD Oct 2 21:02:56.770000 audit: BPF prog-id=30 op=UNLOAD Oct 2 21:02:56.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.770000 audit: BPF prog-id=49 op=LOAD Oct 2 21:02:56.770000 audit: BPF prog-id=35 op=UNLOAD Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit: BPF prog-id=50 op=LOAD Oct 2 21:02:56.772000 audit: BPF prog-id=32 op=UNLOAD Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit: BPF prog-id=51 op=LOAD Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:02:56.772000 audit: BPF prog-id=52 op=LOAD Oct 2 21:02:56.772000 audit: BPF prog-id=33 op=UNLOAD Oct 2 21:02:56.772000 audit: BPF prog-id=34 op=UNLOAD Oct 2 21:02:56.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:02:56.793760 systemd[1]: Started kubelet.service. Oct 2 21:02:56.865098 kubelet[1889]: E1002 21:02:56.865034 1889 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 21:02:56.867061 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:02:56.867207 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:02:56.866000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:02:59.436410 update_engine[1368]: I1002 21:02:59.436352 1368 update_attempter.cc:505] Updating boot flags... Oct 2 21:03:00.518968 env[1380]: time="2023-10-02T21:03:00.518919400Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\"" Oct 2 21:03:01.419876 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4181987269.mount: Deactivated successfully. Oct 2 21:03:05.203863 env[1380]: time="2023-10-02T21:03:05.203805856Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:05.209840 env[1380]: time="2023-10-02T21:03:05.209799818Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:05.213321 env[1380]: time="2023-10-02T21:03:05.213284579Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:05.220019 env[1380]: time="2023-10-02T21:03:05.219984822Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6beea2e5531a0606613594fd3ed92d71bbdcef99dd3237522049a0b32cad736c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:05.220459 env[1380]: time="2023-10-02T21:03:05.220435222Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\" returns image reference \"sha256:30bb499447fe1bc655853e2e8ac386cdeb28c80263536259cb54f290f9a58d6c\"" Oct 2 21:03:05.235359 env[1380]: time="2023-10-02T21:03:05.235317347Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\"" Oct 2 21:03:07.102109 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 21:03:07.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:07.102305 systemd[1]: Stopped kubelet.service. Oct 2 21:03:07.104317 systemd[1]: Started kubelet.service. Oct 2 21:03:07.110143 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 21:03:07.110246 kernel: audit: type=1130 audit(1696280587.101:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:07.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:07.138861 kernel: audit: type=1131 audit(1696280587.101:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:07.138991 kernel: audit: type=1130 audit(1696280587.103:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:07.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:07.198446 kubelet[1956]: E1002 21:03:07.198406 1956 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 21:03:07.201090 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:03:07.200000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:03:07.201240 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:03:07.219263 kernel: audit: type=1131 audit(1696280587.200:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:03:09.178637 env[1380]: time="2023-10-02T21:03:09.178591380Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:09.184752 env[1380]: time="2023-10-02T21:03:09.184723342Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:09.189498 env[1380]: time="2023-10-02T21:03:09.189460383Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:09.194082 env[1380]: time="2023-10-02T21:03:09.194051144Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6a42ce14d716205a99763f3c732c0a8f0ea041bdbbea7d2dfffcc53dafd7cac4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:09.194718 env[1380]: time="2023-10-02T21:03:09.194690384Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\" returns image reference \"sha256:89d57b83c17862d0ca2dd214e9e5ad425f8d67ecba32d10b846f8d22d3b5597c\"" Oct 2 21:03:09.208194 env[1380]: time="2023-10-02T21:03:09.208158787Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\"" Oct 2 21:03:11.444801 env[1380]: time="2023-10-02T21:03:11.444754852Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:11.451148 env[1380]: time="2023-10-02T21:03:11.451097113Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:11.455645 env[1380]: time="2023-10-02T21:03:11.455620968Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:11.460334 env[1380]: time="2023-10-02T21:03:11.460309143Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6511193f8114a2f011790619698efe12a8119ed9a17e2e36f4c1c759ccf173ab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:11.461140 env[1380]: time="2023-10-02T21:03:11.461087386Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\" returns image reference \"sha256:64fc40cee3716a4596d219b360ce536adb7998eaeae3f5dbb774d6503f5039d7\"" Oct 2 21:03:11.474960 env[1380]: time="2023-10-02T21:03:11.474929352Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\"" Oct 2 21:03:12.929931 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount632278398.mount: Deactivated successfully. Oct 2 21:03:14.049132 env[1380]: time="2023-10-02T21:03:14.049071292Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:14.057142 env[1380]: time="2023-10-02T21:03:14.057094757Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:14.062175 env[1380]: time="2023-10-02T21:03:14.062144972Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:14.066655 env[1380]: time="2023-10-02T21:03:14.066625466Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:41c8f92d1cd571e0e36af431f35c78379f84f5daf5b85d43014a9940d697afcf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:14.067127 env[1380]: time="2023-10-02T21:03:14.067088787Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\" returns image reference \"sha256:7da62c127fc0f2c3473babe4dd0fe1da874278c4e524a490b1781e3e0e6dddfa\"" Oct 2 21:03:14.080340 env[1380]: time="2023-10-02T21:03:14.080301508Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 21:03:14.808825 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2903688201.mount: Deactivated successfully. Oct 2 21:03:14.834153 env[1380]: time="2023-10-02T21:03:14.834095648Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:14.846607 env[1380]: time="2023-10-02T21:03:14.846562286Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:14.850987 env[1380]: time="2023-10-02T21:03:14.850955419Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:14.856653 env[1380]: time="2023-10-02T21:03:14.856617476Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:14.857238 env[1380]: time="2023-10-02T21:03:14.857209638Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 21:03:14.870423 env[1380]: time="2023-10-02T21:03:14.870390518Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Oct 2 21:03:17.352108 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 21:03:17.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:17.352299 systemd[1]: Stopped kubelet.service. Oct 2 21:03:17.353700 systemd[1]: Started kubelet.service. Oct 2 21:03:17.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:17.386660 kernel: audit: type=1130 audit(1696280597.351:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:17.386781 kernel: audit: type=1131 audit(1696280597.351:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:17.386816 kernel: audit: type=1130 audit(1696280597.352:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:17.352000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:17.454484 kubelet[1984]: E1002 21:03:17.454442 1984 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 21:03:17.456762 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:03:17.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:03:17.456884 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:03:17.477181 kernel: audit: type=1131 audit(1696280597.455:398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:03:22.340396 env[1380]: time="2023-10-02T21:03:22.340349424Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:22.349063 env[1380]: time="2023-10-02T21:03:22.349033285Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:22.353597 env[1380]: time="2023-10-02T21:03:22.353573536Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:22.358177 env[1380]: time="2023-10-02T21:03:22.358154787Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:22.358941 env[1380]: time="2023-10-02T21:03:22.358918229Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\"" Oct 2 21:03:22.373346 env[1380]: time="2023-10-02T21:03:22.373318865Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 21:03:23.055035 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1173676442.mount: Deactivated successfully. Oct 2 21:03:23.631572 env[1380]: time="2023-10-02T21:03:23.631514946Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:23.641509 env[1380]: time="2023-10-02T21:03:23.641478170Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:23.647718 env[1380]: time="2023-10-02T21:03:23.647681385Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:23.653046 env[1380]: time="2023-10-02T21:03:23.653019277Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:23.653536 env[1380]: time="2023-10-02T21:03:23.653508838Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 21:03:27.602141 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Oct 2 21:03:27.602316 systemd[1]: Stopped kubelet.service. Oct 2 21:03:27.601000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:27.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:27.637672 kernel: audit: type=1130 audit(1696280607.601:399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:27.637752 kernel: audit: type=1131 audit(1696280607.601:400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:27.638525 systemd[1]: Started kubelet.service. Oct 2 21:03:27.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:27.656572 kernel: audit: type=1130 audit(1696280607.637:401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:27.721768 kubelet[2056]: E1002 21:03:27.721728 2056 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 21:03:27.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:03:27.723874 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:03:27.723993 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:03:27.743138 kernel: audit: type=1131 audit(1696280607.723:402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:03:29.451830 systemd[1]: Stopped kubelet.service. Oct 2 21:03:29.450000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:29.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:29.486722 kernel: audit: type=1130 audit(1696280609.450:403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:29.486786 kernel: audit: type=1131 audit(1696280609.450:404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:29.507435 systemd[1]: Reloading. Oct 2 21:03:29.604889 /usr/lib/systemd/system-generators/torcx-generator[2086]: time="2023-10-02T21:03:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:03:29.604918 /usr/lib/systemd/system-generators/torcx-generator[2086]: time="2023-10-02T21:03:29Z" level=info msg="torcx already run" Oct 2 21:03:29.709233 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:03:29.709772 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:03:29.725016 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:03:29.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.826495 kernel: audit: type=1400 audit(1696280609.789:405): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.826601 kernel: audit: type=1400 audit(1696280609.789:406): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.826629 kernel: audit: type=1400 audit(1696280609.789:407): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.842541 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 21:03:29.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.806000 audit: BPF prog-id=53 op=LOAD Oct 2 21:03:29.806000 audit: BPF prog-id=38 op=UNLOAD Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit: BPF prog-id=54 op=LOAD Oct 2 21:03:29.807000 audit: BPF prog-id=39 op=UNLOAD Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit: BPF prog-id=55 op=LOAD Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.807000 audit: BPF prog-id=56 op=LOAD Oct 2 21:03:29.807000 audit: BPF prog-id=40 op=UNLOAD Oct 2 21:03:29.807000 audit: BPF prog-id=41 op=UNLOAD Oct 2 21:03:29.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.808000 audit: BPF prog-id=57 op=LOAD Oct 2 21:03:29.808000 audit: BPF prog-id=42 op=UNLOAD Oct 2 21:03:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.825000 audit: BPF prog-id=58 op=LOAD Oct 2 21:03:29.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.846000 audit: BPF prog-id=59 op=LOAD Oct 2 21:03:29.846000 audit: BPF prog-id=43 op=UNLOAD Oct 2 21:03:29.846000 audit: BPF prog-id=44 op=UNLOAD Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit: BPF prog-id=60 op=LOAD Oct 2 21:03:29.847000 audit: BPF prog-id=45 op=UNLOAD Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit: BPF prog-id=61 op=LOAD Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.847000 audit: BPF prog-id=62 op=LOAD Oct 2 21:03:29.847000 audit: BPF prog-id=46 op=UNLOAD Oct 2 21:03:29.847000 audit: BPF prog-id=47 op=UNLOAD Oct 2 21:03:29.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.848000 audit: BPF prog-id=63 op=LOAD Oct 2 21:03:29.848000 audit: BPF prog-id=48 op=UNLOAD Oct 2 21:03:29.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.849000 audit: BPF prog-id=64 op=LOAD Oct 2 21:03:29.849000 audit: BPF prog-id=49 op=UNLOAD Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit: BPF prog-id=65 op=LOAD Oct 2 21:03:29.851000 audit: BPF prog-id=50 op=UNLOAD Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit: BPF prog-id=66 op=LOAD Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:29.851000 audit: BPF prog-id=67 op=LOAD Oct 2 21:03:29.851000 audit: BPF prog-id=51 op=UNLOAD Oct 2 21:03:29.851000 audit: BPF prog-id=52 op=UNLOAD Oct 2 21:03:29.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:29.867476 systemd[1]: Started kubelet.service. Oct 2 21:03:29.930425 kubelet[2146]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:03:29.931209 kubelet[2146]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 21:03:29.931209 kubelet[2146]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:03:29.931379 kubelet[2146]: I1002 21:03:29.931339 2146 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 21:03:30.770727 kubelet[2146]: I1002 21:03:30.770647 2146 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 21:03:30.770727 kubelet[2146]: I1002 21:03:30.770679 2146 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 21:03:30.771025 kubelet[2146]: I1002 21:03:30.770991 2146 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 21:03:30.776982 kubelet[2146]: E1002 21:03:30.776954 2146 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.20.10:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:30.777062 kubelet[2146]: I1002 21:03:30.777028 2146 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 21:03:30.781257 kubelet[2146]: W1002 21:03:30.781243 2146 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 21:03:30.781865 kubelet[2146]: I1002 21:03:30.781850 2146 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 21:03:30.782199 kubelet[2146]: I1002 21:03:30.782186 2146 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 21:03:30.782395 kubelet[2146]: I1002 21:03:30.782383 2146 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 21:03:30.782548 kubelet[2146]: I1002 21:03:30.782537 2146 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 21:03:30.782609 kubelet[2146]: I1002 21:03:30.782600 2146 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 21:03:30.782771 kubelet[2146]: I1002 21:03:30.782760 2146 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:03:30.783090 kubelet[2146]: I1002 21:03:30.783078 2146 kubelet.go:393] "Attempting to sync node with API server" Oct 2 21:03:30.783181 kubelet[2146]: I1002 21:03:30.783170 2146 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 21:03:30.783241 kubelet[2146]: I1002 21:03:30.783233 2146 kubelet.go:309] "Adding apiserver pod source" Oct 2 21:03:30.783330 kubelet[2146]: I1002 21:03:30.783320 2146 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 21:03:30.784258 kubelet[2146]: I1002 21:03:30.784241 2146 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 21:03:30.784661 kubelet[2146]: W1002 21:03:30.784646 2146 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 21:03:30.785240 kubelet[2146]: I1002 21:03:30.785225 2146 server.go:1232] "Started kubelet" Oct 2 21:03:30.785458 kubelet[2146]: W1002 21:03:30.785427 2146 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.10:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:30.785541 kubelet[2146]: E1002 21:03:30.785531 2146 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.10:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:30.785672 kubelet[2146]: W1002 21:03:30.785649 2146 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.10:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-4ade0e9e10&limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:30.785743 kubelet[2146]: E1002 21:03:30.785734 2146 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.10:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-4ade0e9e10&limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:30.786649 kubelet[2146]: I1002 21:03:30.786627 2146 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 21:03:30.787337 kubelet[2146]: I1002 21:03:30.787323 2146 server.go:462] "Adding debug handlers to kubelet server" Oct 2 21:03:30.787779 kubelet[2146]: E1002 21:03:30.787690 2146 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-4ade0e9e10.178a663a6d3c19c1", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-4ade0e9e10", UID:"ci-3510.3.0-a-4ade0e9e10", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-4ade0e9e10"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 3, 30, 785204673, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 3, 30, 785204673, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510.3.0-a-4ade0e9e10"}': 'Post "https://10.200.20.10:6443/api/v1/namespaces/default/events": dial tcp 10.200.20.10:6443: connect: connection refused'(may retry after sleeping) Oct 2 21:03:30.788389 kubelet[2146]: E1002 21:03:30.788367 2146 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 21:03:30.788389 kubelet[2146]: E1002 21:03:30.788391 2146 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 21:03:30.788849 kubelet[2146]: I1002 21:03:30.788580 2146 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 21:03:30.788849 kubelet[2146]: I1002 21:03:30.788777 2146 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 21:03:30.788000 audit[2146]: AVC avc: denied { mac_admin } for pid=2146 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:30.788000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:03:30.788000 audit[2146]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bb2bd0 a1=4000ba4dc8 a2=4000bb2ba0 a3=25 items=0 ppid=1 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:30.788000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:03:30.788000 audit[2146]: AVC avc: denied { mac_admin } for pid=2146 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:30.788000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:03:30.788000 audit[2146]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000af5460 a1=4000ba4de0 a2=4000bb2c60 a3=25 items=0 ppid=1 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:30.788000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:03:30.789857 kubelet[2146]: I1002 21:03:30.789520 2146 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 21:03:30.789857 kubelet[2146]: I1002 21:03:30.789556 2146 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 21:03:30.789857 kubelet[2146]: I1002 21:03:30.789609 2146 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 21:03:30.793288 kubelet[2146]: E1002 21:03:30.793259 2146 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-4ade0e9e10\" not found" Oct 2 21:03:30.793435 kubelet[2146]: I1002 21:03:30.793423 2146 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 21:03:30.793580 kubelet[2146]: I1002 21:03:30.793568 2146 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 21:03:30.793687 kubelet[2146]: I1002 21:03:30.793678 2146 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 21:03:30.794014 kubelet[2146]: W1002 21:03:30.793985 2146 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.10:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:30.794103 kubelet[2146]: E1002 21:03:30.794094 2146 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.10:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:30.794446 kubelet[2146]: E1002 21:03:30.794431 2146 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.10:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-4ade0e9e10?timeout=10s\": dial tcp 10.200.20.10:6443: connect: connection refused" interval="200ms" Oct 2 21:03:30.794000 audit[2156]: NETFILTER_CFG table=mangle:29 family=2 entries=2 op=nft_register_chain pid=2156 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:30.794000 audit[2156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe01dc380 a2=0 a3=1 items=0 ppid=2146 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:30.794000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 21:03:30.796000 audit[2157]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=2157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:30.796000 audit[2157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc0bbfb70 a2=0 a3=1 items=0 ppid=2146 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:30.796000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 21:03:30.800000 audit[2159]: NETFILTER_CFG table=filter:31 family=2 entries=2 op=nft_register_chain pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:30.800000 audit[2159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd8b1a330 a2=0 a3=1 items=0 ppid=2146 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:30.800000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 21:03:30.804000 audit[2161]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:30.804000 audit[2161]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffeb506530 a2=0 a3=1 items=0 ppid=2146 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:30.804000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 21:03:30.870000 audit[2168]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:30.870000 audit[2168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffe83c9f20 a2=0 a3=1 items=0 ppid=2146 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:30.870000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 21:03:30.871935 kubelet[2146]: I1002 21:03:30.871918 2146 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 21:03:30.872000 audit[2170]: NETFILTER_CFG table=mangle:34 family=2 entries=1 op=nft_register_chain pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:30.872000 audit[2170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe2750a90 a2=0 a3=1 items=0 ppid=2146 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:30.872000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 21:03:30.872000 audit[2169]: NETFILTER_CFG table=mangle:35 family=10 entries=2 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:30.872000 audit[2169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffc34a13d0 a2=0 a3=1 items=0 ppid=2146 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:30.872000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 21:03:30.874548 kubelet[2146]: I1002 21:03:30.874530 2146 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 21:03:30.874686 kubelet[2146]: I1002 21:03:30.874674 2146 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 21:03:30.874751 kubelet[2146]: I1002 21:03:30.874742 2146 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 21:03:30.874891 kubelet[2146]: E1002 21:03:30.874882 2146 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 21:03:30.876052 kubelet[2146]: W1002 21:03:30.876011 2146 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.10:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:30.876344 kubelet[2146]: E1002 21:03:30.876328 2146 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.10:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:30.875000 audit[2173]: NETFILTER_CFG table=mangle:36 family=10 entries=1 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:30.875000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff996caa0 a2=0 a3=1 items=0 ppid=2146 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:30.875000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 21:03:30.877000 audit[2174]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_chain pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:30.877000 audit[2174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdcb17560 a2=0 a3=1 items=0 ppid=2146 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:30.877000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 21:03:30.877000 audit[2175]: NETFILTER_CFG table=nat:38 family=10 entries=2 op=nft_register_chain pid=2175 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:30.877000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffc91ac0a0 a2=0 a3=1 items=0 ppid=2146 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:30.877000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 21:03:30.879000 audit[2176]: NETFILTER_CFG table=filter:39 family=2 entries=1 op=nft_register_chain pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:30.879000 audit[2176]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffd330780 a2=0 a3=1 items=0 ppid=2146 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:30.879000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 21:03:30.879000 audit[2177]: NETFILTER_CFG table=filter:40 family=10 entries=2 op=nft_register_chain pid=2177 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:30.879000 audit[2177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd2d20770 a2=0 a3=1 items=0 ppid=2146 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:30.879000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 21:03:30.928842 kubelet[2146]: I1002 21:03:30.928818 2146 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:30.929569 kubelet[2146]: I1002 21:03:30.929545 2146 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 21:03:30.929569 kubelet[2146]: I1002 21:03:30.929565 2146 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 21:03:30.929669 kubelet[2146]: I1002 21:03:30.929585 2146 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:03:30.929734 kubelet[2146]: E1002 21:03:30.929547 2146 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.10:6443/api/v1/nodes\": dial tcp 10.200.20.10:6443: connect: connection refused" node="ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:30.936084 kubelet[2146]: I1002 21:03:30.936046 2146 policy_none.go:49] "None policy: Start" Oct 2 21:03:30.936771 kubelet[2146]: I1002 21:03:30.936749 2146 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 21:03:30.936829 kubelet[2146]: I1002 21:03:30.936779 2146 state_mem.go:35] "Initializing new in-memory state store" Oct 2 21:03:30.944622 systemd[1]: Created slice kubepods.slice. Oct 2 21:03:30.948984 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 21:03:30.952040 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 21:03:30.957803 kubelet[2146]: I1002 21:03:30.957776 2146 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 21:03:30.956000 audit[2146]: AVC avc: denied { mac_admin } for pid=2146 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:30.956000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:03:30.956000 audit[2146]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000eb9ce0 a1=4000b04de0 a2=4000eb9cb0 a3=25 items=0 ppid=1 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:30.956000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:03:30.958033 kubelet[2146]: I1002 21:03:30.957844 2146 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 21:03:30.958033 kubelet[2146]: I1002 21:03:30.958021 2146 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 21:03:30.959922 kubelet[2146]: E1002 21:03:30.959899 2146 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-4ade0e9e10\" not found" Oct 2 21:03:30.976065 kubelet[2146]: I1002 21:03:30.976039 2146 topology_manager.go:215] "Topology Admit Handler" podUID="c31a207b2b0e732ff6b1a51bb2d73252" podNamespace="kube-system" podName="kube-apiserver-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:30.977400 kubelet[2146]: I1002 21:03:30.977373 2146 topology_manager.go:215] "Topology Admit Handler" podUID="998c9c05969720e6921a75c976684074" podNamespace="kube-system" podName="kube-controller-manager-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:30.978874 kubelet[2146]: I1002 21:03:30.978832 2146 topology_manager.go:215] "Topology Admit Handler" podUID="a69e6707b830e3cfd5bbf0bc59edbbce" podNamespace="kube-system" podName="kube-scheduler-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:30.983478 systemd[1]: Created slice kubepods-burstable-podc31a207b2b0e732ff6b1a51bb2d73252.slice. Oct 2 21:03:30.995080 kubelet[2146]: E1002 21:03:30.995054 2146 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.10:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-4ade0e9e10?timeout=10s\": dial tcp 10.200.20.10:6443: connect: connection refused" interval="400ms" Oct 2 21:03:31.004710 systemd[1]: Created slice kubepods-burstable-pod998c9c05969720e6921a75c976684074.slice. Oct 2 21:03:31.014233 systemd[1]: Created slice kubepods-burstable-poda69e6707b830e3cfd5bbf0bc59edbbce.slice. Oct 2 21:03:31.095446 kubelet[2146]: I1002 21:03:31.095321 2146 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a69e6707b830e3cfd5bbf0bc59edbbce-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-4ade0e9e10\" (UID: \"a69e6707b830e3cfd5bbf0bc59edbbce\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:31.095446 kubelet[2146]: I1002 21:03:31.095415 2146 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/c31a207b2b0e732ff6b1a51bb2d73252-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-4ade0e9e10\" (UID: \"c31a207b2b0e732ff6b1a51bb2d73252\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:31.096217 kubelet[2146]: I1002 21:03:31.096195 2146 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/c31a207b2b0e732ff6b1a51bb2d73252-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-4ade0e9e10\" (UID: \"c31a207b2b0e732ff6b1a51bb2d73252\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:31.096321 kubelet[2146]: I1002 21:03:31.096310 2146 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/998c9c05969720e6921a75c976684074-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-4ade0e9e10\" (UID: \"998c9c05969720e6921a75c976684074\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:31.096409 kubelet[2146]: I1002 21:03:31.096399 2146 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/998c9c05969720e6921a75c976684074-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-4ade0e9e10\" (UID: \"998c9c05969720e6921a75c976684074\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:31.096486 kubelet[2146]: I1002 21:03:31.096477 2146 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/998c9c05969720e6921a75c976684074-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-4ade0e9e10\" (UID: \"998c9c05969720e6921a75c976684074\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:31.096558 kubelet[2146]: I1002 21:03:31.096549 2146 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/c31a207b2b0e732ff6b1a51bb2d73252-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-4ade0e9e10\" (UID: \"c31a207b2b0e732ff6b1a51bb2d73252\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:31.096632 kubelet[2146]: I1002 21:03:31.096622 2146 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/998c9c05969720e6921a75c976684074-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-4ade0e9e10\" (UID: \"998c9c05969720e6921a75c976684074\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:31.096709 kubelet[2146]: I1002 21:03:31.096699 2146 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/998c9c05969720e6921a75c976684074-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-4ade0e9e10\" (UID: \"998c9c05969720e6921a75c976684074\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:31.131728 kubelet[2146]: I1002 21:03:31.131704 2146 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:31.132284 kubelet[2146]: E1002 21:03:31.132269 2146 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.10:6443/api/v1/nodes\": dial tcp 10.200.20.10:6443: connect: connection refused" node="ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:31.303693 env[1380]: time="2023-10-02T21:03:31.303646126Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-4ade0e9e10,Uid:c31a207b2b0e732ff6b1a51bb2d73252,Namespace:kube-system,Attempt:0,}" Oct 2 21:03:31.307211 env[1380]: time="2023-10-02T21:03:31.307179612Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-4ade0e9e10,Uid:998c9c05969720e6921a75c976684074,Namespace:kube-system,Attempt:0,}" Oct 2 21:03:31.317039 env[1380]: time="2023-10-02T21:03:31.316991551Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-4ade0e9e10,Uid:a69e6707b830e3cfd5bbf0bc59edbbce,Namespace:kube-system,Attempt:0,}" Oct 2 21:03:31.395964 kubelet[2146]: E1002 21:03:31.395933 2146 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.10:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-4ade0e9e10?timeout=10s\": dial tcp 10.200.20.10:6443: connect: connection refused" interval="800ms" Oct 2 21:03:31.534154 kubelet[2146]: I1002 21:03:31.533956 2146 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:31.534337 kubelet[2146]: E1002 21:03:31.534311 2146 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.10:6443/api/v1/nodes\": dial tcp 10.200.20.10:6443: connect: connection refused" node="ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:31.967245 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2005394339.mount: Deactivated successfully. Oct 2 21:03:31.996988 env[1380]: time="2023-10-02T21:03:31.996935305Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:32.013768 env[1380]: time="2023-10-02T21:03:32.013734017Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:32.018486 env[1380]: time="2023-10-02T21:03:32.018460426Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:32.026372 env[1380]: time="2023-10-02T21:03:32.026346441Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:32.030324 env[1380]: time="2023-10-02T21:03:32.030301008Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:32.038951 env[1380]: time="2023-10-02T21:03:32.038926625Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:32.043557 env[1380]: time="2023-10-02T21:03:32.043529913Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:32.047385 env[1380]: time="2023-10-02T21:03:32.047358040Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:32.050850 env[1380]: time="2023-10-02T21:03:32.050827567Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:32.057347 env[1380]: time="2023-10-02T21:03:32.057321739Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:32.057775 kubelet[2146]: W1002 21:03:32.057747 2146 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.10:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:32.058024 kubelet[2146]: E1002 21:03:32.057785 2146 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.10:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:32.061164 env[1380]: time="2023-10-02T21:03:32.061136546Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:32.068495 env[1380]: time="2023-10-02T21:03:32.068469640Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:03:32.134324 env[1380]: time="2023-10-02T21:03:32.134246444Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:03:32.134517 env[1380]: time="2023-10-02T21:03:32.134494685Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:03:32.134613 env[1380]: time="2023-10-02T21:03:32.134593685Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:03:32.134967 env[1380]: time="2023-10-02T21:03:32.134877445Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5cb257fdee2d02bea35f9db7b1a7f1bd25157967b34e80181b4b7e1dc66d365c pid=2186 runtime=io.containerd.runc.v2 Oct 2 21:03:32.147635 kubelet[2146]: W1002 21:03:32.147519 2146 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.10:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-4ade0e9e10&limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:32.147635 kubelet[2146]: E1002 21:03:32.147592 2146 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.10:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-4ade0e9e10&limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:32.158499 systemd[1]: Started cri-containerd-5cb257fdee2d02bea35f9db7b1a7f1bd25157967b34e80181b4b7e1dc66d365c.scope. Oct 2 21:03:32.176372 env[1380]: time="2023-10-02T21:03:32.176299803Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:03:32.176494 env[1380]: time="2023-10-02T21:03:32.176340603Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:03:32.176494 env[1380]: time="2023-10-02T21:03:32.176350763Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:03:32.176494 env[1380]: time="2023-10-02T21:03:32.176467724Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9192dd1e01ae614dad8720096f052d4a4d15f8cbe6b6fa3a62b80a4c500bf073 pid=2229 runtime=io.containerd.runc.v2 Oct 2 21:03:32.183440 env[1380]: time="2023-10-02T21:03:32.183376457Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:03:32.183604 env[1380]: time="2023-10-02T21:03:32.183582217Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:03:32.183708 env[1380]: time="2023-10-02T21:03:32.183686697Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:03:32.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.182000 audit: BPF prog-id=68 op=LOAD Oct 2 21:03:32.183000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.183000 audit[2197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2186 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.183000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563623235376664656532643032626561333566396462376231613766 Oct 2 21:03:32.183000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.183000 audit[2197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2186 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.183000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563623235376664656532643032626561333566396462376231613766 Oct 2 21:03:32.183000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.183000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.183000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.183000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.183000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.183000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.183000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.183000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.183000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.183000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.183000 audit: BPF prog-id=69 op=LOAD Oct 2 21:03:32.183000 audit[2197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2186 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.183000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563623235376664656532643032626561333566396462376231613766 Oct 2 21:03:32.184000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.184000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.184000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.184000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.184000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.184000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.184000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.184000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.184000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.184000 audit: BPF prog-id=70 op=LOAD Oct 2 21:03:32.184000 audit[2197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2186 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563623235376664656532643032626561333566396462376231613766 Oct 2 21:03:32.184000 audit: BPF prog-id=70 op=UNLOAD Oct 2 21:03:32.185000 audit: BPF prog-id=69 op=UNLOAD Oct 2 21:03:32.185000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.185000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.185000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.185000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.185000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.185000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.185000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.185000 audit[2197]: AVC avc: denied { perfmon } for pid=2197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.185000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.185000 audit[2197]: AVC avc: denied { bpf } for pid=2197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.185000 audit: BPF prog-id=71 op=LOAD Oct 2 21:03:32.185000 audit[2197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2186 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563623235376664656532643032626561333566396462376231613766 Oct 2 21:03:32.194826 env[1380]: time="2023-10-02T21:03:32.194748758Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/063bdad17c8f5f71e117970260a1c90eace1a5eda98eda532398a36602dbd4c8 pid=2216 runtime=io.containerd.runc.v2 Oct 2 21:03:32.197062 kubelet[2146]: E1002 21:03:32.197032 2146 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.10:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-4ade0e9e10?timeout=10s\": dial tcp 10.200.20.10:6443: connect: connection refused" interval="1.6s" Oct 2 21:03:32.202753 systemd[1]: Started cri-containerd-9192dd1e01ae614dad8720096f052d4a4d15f8cbe6b6fa3a62b80a4c500bf073.scope. Oct 2 21:03:32.222005 env[1380]: time="2023-10-02T21:03:32.219898125Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-4ade0e9e10,Uid:c31a207b2b0e732ff6b1a51bb2d73252,Namespace:kube-system,Attempt:0,} returns sandbox id \"5cb257fdee2d02bea35f9db7b1a7f1bd25157967b34e80181b4b7e1dc66d365c\"" Oct 2 21:03:32.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.225000 audit: BPF prog-id=72 op=LOAD Oct 2 21:03:32.227052 env[1380]: time="2023-10-02T21:03:32.227005779Z" level=info msg="CreateContainer within sandbox \"5cb257fdee2d02bea35f9db7b1a7f1bd25157967b34e80181b4b7e1dc66d365c\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2229 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931393264643165303161653631346461643837323030393666303532 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2229 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931393264643165303161653631346461643837323030393666303532 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit: BPF prog-id=73 op=LOAD Oct 2 21:03:32.226000 audit[2243]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2229 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931393264643165303161653631346461643837323030393666303532 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit: BPF prog-id=74 op=LOAD Oct 2 21:03:32.226000 audit[2243]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2229 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931393264643165303161653631346461643837323030393666303532 Oct 2 21:03:32.226000 audit: BPF prog-id=74 op=UNLOAD Oct 2 21:03:32.226000 audit: BPF prog-id=73 op=UNLOAD Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { perfmon } for pid=2243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit[2243]: AVC avc: denied { bpf } for pid=2243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.226000 audit: BPF prog-id=75 op=LOAD Oct 2 21:03:32.226000 audit[2243]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2229 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931393264643165303161653631346461643837323030393666303532 Oct 2 21:03:32.239409 systemd[1]: Started cri-containerd-063bdad17c8f5f71e117970260a1c90eace1a5eda98eda532398a36602dbd4c8.scope. Oct 2 21:03:32.259900 env[1380]: time="2023-10-02T21:03:32.259834281Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-4ade0e9e10,Uid:998c9c05969720e6921a75c976684074,Namespace:kube-system,Attempt:0,} returns sandbox id \"9192dd1e01ae614dad8720096f052d4a4d15f8cbe6b6fa3a62b80a4c500bf073\"" Oct 2 21:03:32.263001 kubelet[2146]: W1002 21:03:32.262757 2146 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.10:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:32.263001 kubelet[2146]: E1002 21:03:32.262813 2146 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.10:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:32.263344 env[1380]: time="2023-10-02T21:03:32.263280007Z" level=info msg="CreateContainer within sandbox \"9192dd1e01ae614dad8720096f052d4a4d15f8cbe6b6fa3a62b80a4c500bf073\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 21:03:32.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.264000 audit: BPF prog-id=76 op=LOAD Oct 2 21:03:32.264000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.264000 audit[2258]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2216 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036336264616431376338663566373165313137393730323630613163 Oct 2 21:03:32.264000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.264000 audit[2258]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2216 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036336264616431376338663566373165313137393730323630613163 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit: BPF prog-id=77 op=LOAD Oct 2 21:03:32.265000 audit[2258]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2216 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.265000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036336264616431376338663566373165313137393730323630613163 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.265000 audit: BPF prog-id=78 op=LOAD Oct 2 21:03:32.265000 audit[2258]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2216 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.265000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036336264616431376338663566373165313137393730323630613163 Oct 2 21:03:32.266000 audit: BPF prog-id=78 op=UNLOAD Oct 2 21:03:32.266000 audit: BPF prog-id=77 op=UNLOAD Oct 2 21:03:32.266000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.266000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.266000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.266000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.266000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.266000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.266000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.266000 audit[2258]: AVC avc: denied { perfmon } for pid=2258 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.266000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.266000 audit[2258]: AVC avc: denied { bpf } for pid=2258 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.266000 audit: BPF prog-id=79 op=LOAD Oct 2 21:03:32.266000 audit[2258]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2216 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036336264616431376338663566373165313137393730323630613163 Oct 2 21:03:32.273895 env[1380]: time="2023-10-02T21:03:32.273863747Z" level=info msg="CreateContainer within sandbox \"5cb257fdee2d02bea35f9db7b1a7f1bd25157967b34e80181b4b7e1dc66d365c\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"9683ff6156e969cbf25410ab29e92795c6980489c228b5aa49afbd965102b003\"" Oct 2 21:03:32.274607 env[1380]: time="2023-10-02T21:03:32.274584788Z" level=info msg="StartContainer for \"9683ff6156e969cbf25410ab29e92795c6980489c228b5aa49afbd965102b003\"" Oct 2 21:03:32.295575 env[1380]: time="2023-10-02T21:03:32.295527308Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-4ade0e9e10,Uid:a69e6707b830e3cfd5bbf0bc59edbbce,Namespace:kube-system,Attempt:0,} returns sandbox id \"063bdad17c8f5f71e117970260a1c90eace1a5eda98eda532398a36602dbd4c8\"" Oct 2 21:03:32.300172 systemd[1]: Started cri-containerd-9683ff6156e969cbf25410ab29e92795c6980489c228b5aa49afbd965102b003.scope. Oct 2 21:03:32.303294 env[1380]: time="2023-10-02T21:03:32.301103878Z" level=info msg="CreateContainer within sandbox \"063bdad17c8f5f71e117970260a1c90eace1a5eda98eda532398a36602dbd4c8\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 21:03:32.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.318000 audit: BPF prog-id=80 op=LOAD Oct 2 21:03:32.320381 env[1380]: time="2023-10-02T21:03:32.320154514Z" level=info msg="CreateContainer within sandbox \"9192dd1e01ae614dad8720096f052d4a4d15f8cbe6b6fa3a62b80a4c500bf073\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"a24abf0d11bc0b8ecb58830c7401e06aecf4af06e26bf0369bacfee56f2f8a5c\"" Oct 2 21:03:32.321013 env[1380]: time="2023-10-02T21:03:32.320980396Z" level=info msg="StartContainer for \"a24abf0d11bc0b8ecb58830c7401e06aecf4af06e26bf0369bacfee56f2f8a5c\"" Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2186 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936383366663631353665393639636266323534313061623239653932 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2186 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936383366663631353665393639636266323534313061623239653932 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit: BPF prog-id=81 op=LOAD Oct 2 21:03:32.320000 audit[2305]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2186 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936383366663631353665393639636266323534313061623239653932 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit: BPF prog-id=82 op=LOAD Oct 2 21:03:32.320000 audit[2305]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2186 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936383366663631353665393639636266323534313061623239653932 Oct 2 21:03:32.320000 audit: BPF prog-id=82 op=UNLOAD Oct 2 21:03:32.320000 audit: BPF prog-id=81 op=UNLOAD Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.320000 audit: BPF prog-id=83 op=LOAD Oct 2 21:03:32.320000 audit[2305]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2186 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936383366663631353665393639636266323534313061623239653932 Oct 2 21:03:32.336838 kubelet[2146]: I1002 21:03:32.336638 2146 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:32.337180 kubelet[2146]: E1002 21:03:32.337165 2146 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.10:6443/api/v1/nodes\": dial tcp 10.200.20.10:6443: connect: connection refused" node="ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:32.348421 systemd[1]: Started cri-containerd-a24abf0d11bc0b8ecb58830c7401e06aecf4af06e26bf0369bacfee56f2f8a5c.scope. Oct 2 21:03:32.357695 env[1380]: time="2023-10-02T21:03:32.357648545Z" level=info msg="CreateContainer within sandbox \"063bdad17c8f5f71e117970260a1c90eace1a5eda98eda532398a36602dbd4c8\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"76f92d9fa8d82ed5c11c8896033b9c943701d8754482e60f67990c4f0d7394f3\"" Oct 2 21:03:32.358283 env[1380]: time="2023-10-02T21:03:32.358250546Z" level=info msg="StartContainer for \"76f92d9fa8d82ed5c11c8896033b9c943701d8754482e60f67990c4f0d7394f3\"" Oct 2 21:03:32.364643 kubelet[2146]: W1002 21:03:32.364549 2146 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.10:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:32.364643 kubelet[2146]: E1002 21:03:32.364612 2146 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.10:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.10:6443: connect: connection refused Oct 2 21:03:32.377748 env[1380]: time="2023-10-02T21:03:32.377694663Z" level=info msg="StartContainer for \"9683ff6156e969cbf25410ab29e92795c6980489c228b5aa49afbd965102b003\" returns successfully" Oct 2 21:03:32.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.378000 audit: BPF prog-id=84 op=LOAD Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2229 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132346162663064313162633062386563623538383330633734303165 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2229 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132346162663064313162633062386563623538383330633734303165 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit: BPF prog-id=85 op=LOAD Oct 2 21:03:32.379000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2229 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132346162663064313162633062386563623538383330633734303165 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit: BPF prog-id=86 op=LOAD Oct 2 21:03:32.379000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2229 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132346162663064313162633062386563623538383330633734303165 Oct 2 21:03:32.379000 audit: BPF prog-id=86 op=UNLOAD Oct 2 21:03:32.379000 audit: BPF prog-id=85 op=UNLOAD Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.379000 audit: BPF prog-id=87 op=LOAD Oct 2 21:03:32.379000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2229 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132346162663064313162633062386563623538383330633734303165 Oct 2 21:03:32.401555 systemd[1]: Started cri-containerd-76f92d9fa8d82ed5c11c8896033b9c943701d8754482e60f67990c4f0d7394f3.scope. Oct 2 21:03:32.422289 env[1380]: time="2023-10-02T21:03:32.422245227Z" level=info msg="StartContainer for \"a24abf0d11bc0b8ecb58830c7401e06aecf4af06e26bf0369bacfee56f2f8a5c\" returns successfully" Oct 2 21:03:32.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.449000 audit: BPF prog-id=88 op=LOAD Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { bpf } for pid=2368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2216 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736663932643966613864383265643563313163383839363033336239 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2216 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736663932643966613864383265643563313163383839363033336239 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { bpf } for pid=2368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { bpf } for pid=2368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { bpf } for pid=2368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { bpf } for pid=2368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { bpf } for pid=2368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit: BPF prog-id=89 op=LOAD Oct 2 21:03:32.450000 audit[2368]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2216 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736663932643966613864383265643563313163383839363033336239 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { bpf } for pid=2368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { bpf } for pid=2368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { bpf } for pid=2368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { bpf } for pid=2368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit: BPF prog-id=90 op=LOAD Oct 2 21:03:32.450000 audit[2368]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2216 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736663932643966613864383265643563313163383839363033336239 Oct 2 21:03:32.450000 audit: BPF prog-id=90 op=UNLOAD Oct 2 21:03:32.450000 audit: BPF prog-id=89 op=UNLOAD Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { bpf } for pid=2368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { bpf } for pid=2368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { bpf } for pid=2368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { perfmon } for pid=2368 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { bpf } for pid=2368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit[2368]: AVC avc: denied { bpf } for pid=2368 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:32.450000 audit: BPF prog-id=91 op=LOAD Oct 2 21:03:32.450000 audit[2368]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2216 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:32.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736663932643966613864383265643563313163383839363033336239 Oct 2 21:03:32.486070 env[1380]: time="2023-10-02T21:03:32.485977827Z" level=info msg="StartContainer for \"76f92d9fa8d82ed5c11c8896033b9c943701d8754482e60f67990c4f0d7394f3\" returns successfully" Oct 2 21:03:33.939187 kubelet[2146]: I1002 21:03:33.939162 2146 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:34.627000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:34.634256 kernel: kauditd_printk_skb: 561 callbacks suppressed Oct 2 21:03:34.634371 kernel: audit: type=1400 audit(1696280614.627:700): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:34.627000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400097e000 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:03:34.694508 kernel: audit: type=1300 audit(1696280614.627:700): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400097e000 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:03:34.627000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:34.721503 kernel: audit: type=1327 audit(1696280614.627:700): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:34.628000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:34.746906 kernel: audit: type=1400 audit(1696280614.628:701): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:34.747053 kernel: audit: type=1300 audit(1696280614.628:701): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40001b6160 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:03:34.628000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40001b6160 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:03:34.628000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:34.801291 kernel: audit: type=1327 audit(1696280614.628:701): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:34.775000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:34.823804 kernel: audit: type=1400 audit(1696280614.775:702): avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:34.823906 kernel: audit: type=1400 audit(1696280614.775:703): avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:34.775000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:34.775000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=400496cf60 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:03:34.881128 kernel: audit: type=1300 audit(1696280614.775:703): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=400496cf60 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:03:34.775000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004782060 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:03:34.909256 kernel: audit: type=1300 audit(1696280614.775:702): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004782060 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:03:34.775000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:03:34.775000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:03:34.776000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:34.776000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=47 a1=4004782de0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:03:34.776000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:03:34.776000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:34.776000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=48 a1=4004cdb1c0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:03:34.776000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:03:34.776000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:34.776000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=48 a1=4004783cb0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:03:34.776000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:03:34.800000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:34.800000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=40063284a0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:03:34.800000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:03:34.962153 kubelet[2146]: E1002 21:03:34.962128 2146 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-4ade0e9e10\" not found" node="ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:35.032749 kubelet[2146]: I1002 21:03:35.032716 2146 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:35.042799 kubelet[2146]: E1002 21:03:35.042769 2146 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-4ade0e9e10\" not found" Oct 2 21:03:35.143777 kubelet[2146]: E1002 21:03:35.143685 2146 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-4ade0e9e10\" not found" Oct 2 21:03:35.786883 kubelet[2146]: I1002 21:03:35.786847 2146 apiserver.go:52] "Watching apiserver" Oct 2 21:03:35.794786 kubelet[2146]: I1002 21:03:35.794750 2146 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 21:03:37.493283 systemd[1]: Reloading. Oct 2 21:03:37.601381 /usr/lib/systemd/system-generators/torcx-generator[2430]: time="2023-10-02T21:03:37Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:03:37.603142 /usr/lib/systemd/system-generators/torcx-generator[2430]: time="2023-10-02T21:03:37Z" level=info msg="torcx already run" Oct 2 21:03:37.708265 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:03:37.708283 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:03:37.724063 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:03:37.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.811000 audit: BPF prog-id=92 op=LOAD Oct 2 21:03:37.811000 audit: BPF prog-id=76 op=UNLOAD Oct 2 21:03:37.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.812000 audit: BPF prog-id=93 op=LOAD Oct 2 21:03:37.812000 audit: BPF prog-id=53 op=UNLOAD Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit: BPF prog-id=94 op=LOAD Oct 2 21:03:37.813000 audit: BPF prog-id=54 op=UNLOAD Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit: BPF prog-id=95 op=LOAD Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit: BPF prog-id=96 op=LOAD Oct 2 21:03:37.813000 audit: BPF prog-id=55 op=UNLOAD Oct 2 21:03:37.813000 audit: BPF prog-id=56 op=UNLOAD Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.813000 audit: BPF prog-id=97 op=LOAD Oct 2 21:03:37.813000 audit: BPF prog-id=80 op=UNLOAD Oct 2 21:03:37.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.815000 audit: BPF prog-id=98 op=LOAD Oct 2 21:03:37.815000 audit: BPF prog-id=57 op=UNLOAD Oct 2 21:03:37.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.816000 audit: BPF prog-id=99 op=LOAD Oct 2 21:03:37.816000 audit: BPF prog-id=88 op=UNLOAD Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit: BPF prog-id=100 op=LOAD Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.817000 audit: BPF prog-id=101 op=LOAD Oct 2 21:03:37.817000 audit: BPF prog-id=58 op=UNLOAD Oct 2 21:03:37.817000 audit: BPF prog-id=59 op=UNLOAD Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit: BPF prog-id=102 op=LOAD Oct 2 21:03:37.818000 audit: BPF prog-id=60 op=UNLOAD Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit: BPF prog-id=103 op=LOAD Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit: BPF prog-id=104 op=LOAD Oct 2 21:03:37.818000 audit: BPF prog-id=61 op=UNLOAD Oct 2 21:03:37.818000 audit: BPF prog-id=62 op=UNLOAD Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit: BPF prog-id=105 op=LOAD Oct 2 21:03:37.819000 audit: BPF prog-id=68 op=UNLOAD Oct 2 21:03:37.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.819000 audit: BPF prog-id=106 op=LOAD Oct 2 21:03:37.819000 audit: BPF prog-id=72 op=UNLOAD Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit: BPF prog-id=107 op=LOAD Oct 2 21:03:37.820000 audit: BPF prog-id=63 op=UNLOAD Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit: BPF prog-id=108 op=LOAD Oct 2 21:03:37.820000 audit: BPF prog-id=84 op=UNLOAD Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.821000 audit: BPF prog-id=109 op=LOAD Oct 2 21:03:37.821000 audit: BPF prog-id=64 op=UNLOAD Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit: BPF prog-id=110 op=LOAD Oct 2 21:03:37.823000 audit: BPF prog-id=65 op=UNLOAD Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit: BPF prog-id=111 op=LOAD Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.823000 audit: BPF prog-id=112 op=LOAD Oct 2 21:03:37.823000 audit: BPF prog-id=66 op=UNLOAD Oct 2 21:03:37.823000 audit: BPF prog-id=67 op=UNLOAD Oct 2 21:03:37.838699 systemd[1]: Stopping kubelet.service... Oct 2 21:03:37.856524 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 21:03:37.856937 systemd[1]: Stopped kubelet.service. Oct 2 21:03:37.855000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:37.857217 systemd[1]: kubelet.service: Consumed 1.162s CPU time. Oct 2 21:03:37.859724 systemd[1]: Started kubelet.service. Oct 2 21:03:37.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:37.955694 kubelet[2490]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:03:37.955694 kubelet[2490]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 21:03:37.955694 kubelet[2490]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:03:37.956048 kubelet[2490]: I1002 21:03:37.955802 2490 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 21:03:37.961839 kubelet[2490]: I1002 21:03:37.961813 2490 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 21:03:37.961966 kubelet[2490]: I1002 21:03:37.961955 2490 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 21:03:37.962248 kubelet[2490]: I1002 21:03:37.962231 2490 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 21:03:37.965715 kubelet[2490]: I1002 21:03:37.965689 2490 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 21:03:37.967383 kubelet[2490]: I1002 21:03:37.967365 2490 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 21:03:37.973569 kubelet[2490]: W1002 21:03:37.973548 2490 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 21:03:37.974124 kubelet[2490]: I1002 21:03:37.974101 2490 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 21:03:37.974370 kubelet[2490]: I1002 21:03:37.974354 2490 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 21:03:37.974520 kubelet[2490]: I1002 21:03:37.974500 2490 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 21:03:37.974601 kubelet[2490]: I1002 21:03:37.974543 2490 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 21:03:37.974601 kubelet[2490]: I1002 21:03:37.974552 2490 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 21:03:37.974601 kubelet[2490]: I1002 21:03:37.974578 2490 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:03:37.974817 kubelet[2490]: I1002 21:03:37.974803 2490 kubelet.go:393] "Attempting to sync node with API server" Oct 2 21:03:37.974917 kubelet[2490]: I1002 21:03:37.974890 2490 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 21:03:37.974917 kubelet[2490]: I1002 21:03:37.974913 2490 kubelet.go:309] "Adding apiserver pod source" Oct 2 21:03:37.975006 kubelet[2490]: I1002 21:03:37.974948 2490 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 21:03:37.981837 kubelet[2490]: I1002 21:03:37.980115 2490 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 21:03:37.981837 kubelet[2490]: I1002 21:03:37.980797 2490 server.go:1232] "Started kubelet" Oct 2 21:03:37.981000 audit[2490]: AVC avc: denied { mac_admin } for pid=2490 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.981000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:03:37.981000 audit[2490]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c4c8a0 a1=4000bef200 a2=4000c4c870 a3=25 items=0 ppid=1 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:37.981000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:03:37.981000 audit[2490]: AVC avc: denied { mac_admin } for pid=2490 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:37.981000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:03:37.981000 audit[2490]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c010e0 a1=4000bef218 a2=4000c4c930 a3=25 items=0 ppid=1 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:37.981000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:03:37.982818 kubelet[2490]: I1002 21:03:37.982555 2490 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 21:03:37.982818 kubelet[2490]: I1002 21:03:37.982596 2490 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 21:03:37.982818 kubelet[2490]: I1002 21:03:37.982615 2490 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 21:03:37.991397 kubelet[2490]: I1002 21:03:37.991370 2490 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 21:03:37.996130 kubelet[2490]: I1002 21:03:37.992072 2490 server.go:462] "Adding debug handlers to kubelet server" Oct 2 21:03:37.996130 kubelet[2490]: I1002 21:03:37.993215 2490 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 21:03:37.996130 kubelet[2490]: I1002 21:03:37.993397 2490 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 21:03:37.996130 kubelet[2490]: I1002 21:03:37.995018 2490 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 21:03:37.999129 kubelet[2490]: I1002 21:03:37.998222 2490 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 21:03:37.999129 kubelet[2490]: I1002 21:03:37.998385 2490 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 21:03:38.000611 kubelet[2490]: I1002 21:03:38.000584 2490 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 21:03:38.005125 kubelet[2490]: I1002 21:03:38.001975 2490 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 21:03:38.005125 kubelet[2490]: I1002 21:03:38.002023 2490 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 21:03:38.005125 kubelet[2490]: I1002 21:03:38.002041 2490 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 21:03:38.005125 kubelet[2490]: E1002 21:03:38.002085 2490 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 21:03:38.011000 audit[2514]: USER_ACCT pid=2514 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:38.013653 sudo[2514]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 21:03:38.012000 audit[2514]: CRED_REFR pid=2514 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:38.013880 sudo[2514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 21:03:38.014000 audit[2514]: USER_START pid=2514 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:38.017990 kubelet[2490]: E1002 21:03:38.017964 2490 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 21:03:38.018088 kubelet[2490]: E1002 21:03:38.018078 2490 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 21:03:38.101031 kubelet[2490]: I1002 21:03:38.100949 2490 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:38.105215 kubelet[2490]: E1002 21:03:38.105171 2490 kubelet.go:2327] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 21:03:38.118794 kubelet[2490]: I1002 21:03:38.118776 2490 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 21:03:38.118902 kubelet[2490]: I1002 21:03:38.118892 2490 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 21:03:38.118984 kubelet[2490]: I1002 21:03:38.118975 2490 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:03:38.119226 kubelet[2490]: I1002 21:03:38.119212 2490 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 21:03:38.119321 kubelet[2490]: I1002 21:03:38.119310 2490 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 2 21:03:38.119870 kubelet[2490]: I1002 21:03:38.119855 2490 policy_none.go:49] "None policy: Start" Oct 2 21:03:38.120435 kubelet[2490]: I1002 21:03:38.120416 2490 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:38.120580 kubelet[2490]: I1002 21:03:38.120569 2490 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:38.125085 kubelet[2490]: I1002 21:03:38.125067 2490 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 21:03:38.125247 kubelet[2490]: I1002 21:03:38.125235 2490 state_mem.go:35] "Initializing new in-memory state store" Oct 2 21:03:38.125438 kubelet[2490]: I1002 21:03:38.125426 2490 state_mem.go:75] "Updated machine memory state" Oct 2 21:03:38.135460 kubelet[2490]: I1002 21:03:38.135442 2490 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 21:03:38.134000 audit[2490]: AVC avc: denied { mac_admin } for pid=2490 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:38.134000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:03:38.134000 audit[2490]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4001219ec0 a1=4001264a80 a2=4001219e90 a3=25 items=0 ppid=1 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:38.134000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:03:38.136228 kubelet[2490]: I1002 21:03:38.136211 2490 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 21:03:38.136741 kubelet[2490]: I1002 21:03:38.136722 2490 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 21:03:38.305974 kubelet[2490]: I1002 21:03:38.305944 2490 topology_manager.go:215] "Topology Admit Handler" podUID="c31a207b2b0e732ff6b1a51bb2d73252" podNamespace="kube-system" podName="kube-apiserver-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:38.306248 kubelet[2490]: I1002 21:03:38.306231 2490 topology_manager.go:215] "Topology Admit Handler" podUID="998c9c05969720e6921a75c976684074" podNamespace="kube-system" podName="kube-controller-manager-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:38.306382 kubelet[2490]: I1002 21:03:38.306369 2490 topology_manager.go:215] "Topology Admit Handler" podUID="a69e6707b830e3cfd5bbf0bc59edbbce" podNamespace="kube-system" podName="kube-scheduler-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:38.315314 kubelet[2490]: W1002 21:03:38.315294 2490 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 21:03:38.318811 kubelet[2490]: W1002 21:03:38.318793 2490 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 21:03:38.319323 kubelet[2490]: W1002 21:03:38.319307 2490 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 21:03:38.401037 kubelet[2490]: I1002 21:03:38.401011 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/c31a207b2b0e732ff6b1a51bb2d73252-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-4ade0e9e10\" (UID: \"c31a207b2b0e732ff6b1a51bb2d73252\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:38.401243 kubelet[2490]: I1002 21:03:38.401231 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/c31a207b2b0e732ff6b1a51bb2d73252-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-4ade0e9e10\" (UID: \"c31a207b2b0e732ff6b1a51bb2d73252\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:38.401361 kubelet[2490]: I1002 21:03:38.401350 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/998c9c05969720e6921a75c976684074-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-4ade0e9e10\" (UID: \"998c9c05969720e6921a75c976684074\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:38.401434 kubelet[2490]: I1002 21:03:38.401424 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/998c9c05969720e6921a75c976684074-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-4ade0e9e10\" (UID: \"998c9c05969720e6921a75c976684074\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:38.401504 kubelet[2490]: I1002 21:03:38.401495 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/998c9c05969720e6921a75c976684074-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-4ade0e9e10\" (UID: \"998c9c05969720e6921a75c976684074\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:38.401575 kubelet[2490]: I1002 21:03:38.401567 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/c31a207b2b0e732ff6b1a51bb2d73252-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-4ade0e9e10\" (UID: \"c31a207b2b0e732ff6b1a51bb2d73252\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:38.401665 kubelet[2490]: I1002 21:03:38.401646 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/998c9c05969720e6921a75c976684074-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-4ade0e9e10\" (UID: \"998c9c05969720e6921a75c976684074\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:38.401733 kubelet[2490]: I1002 21:03:38.401724 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/998c9c05969720e6921a75c976684074-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-4ade0e9e10\" (UID: \"998c9c05969720e6921a75c976684074\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:38.401808 kubelet[2490]: I1002 21:03:38.401798 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a69e6707b830e3cfd5bbf0bc59edbbce-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-4ade0e9e10\" (UID: \"a69e6707b830e3cfd5bbf0bc59edbbce\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-4ade0e9e10" Oct 2 21:03:38.556432 sudo[2514]: pam_unix(sudo:session): session closed for user root Oct 2 21:03:38.555000 audit[2514]: USER_END pid=2514 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:38.555000 audit[2514]: CRED_DISP pid=2514 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:38.977107 kubelet[2490]: I1002 21:03:38.977073 2490 apiserver.go:52] "Watching apiserver" Oct 2 21:03:38.999293 kubelet[2490]: I1002 21:03:38.999259 2490 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 21:03:39.111786 kubelet[2490]: I1002 21:03:39.111744 2490 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-4ade0e9e10" podStartSLOduration=1.111664969 podCreationTimestamp="2023-10-02 21:03:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:03:39.103382796 +0000 UTC m=+1.229740076" watchObservedRunningTime="2023-10-02 21:03:39.111664969 +0000 UTC m=+1.238022249" Oct 2 21:03:39.111934 kubelet[2490]: I1002 21:03:39.111832 2490 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-4ade0e9e10" podStartSLOduration=1.111816449 podCreationTimestamp="2023-10-02 21:03:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:03:39.111352648 +0000 UTC m=+1.237709928" watchObservedRunningTime="2023-10-02 21:03:39.111816449 +0000 UTC m=+1.238173729" Oct 2 21:03:39.141920 kubelet[2490]: I1002 21:03:39.141190 2490 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-4ade0e9e10" podStartSLOduration=1.141158216 podCreationTimestamp="2023-10-02 21:03:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:03:39.140435814 +0000 UTC m=+1.266793094" watchObservedRunningTime="2023-10-02 21:03:39.141158216 +0000 UTC m=+1.267515496" Oct 2 21:03:40.213024 sudo[1684]: pam_unix(sudo:session): session closed for user root Oct 2 21:03:40.212000 audit[1684]: USER_END pid=1684 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:40.218397 kernel: kauditd_printk_skb: 277 callbacks suppressed Oct 2 21:03:40.218493 kernel: audit: type=1106 audit(1696280620.212:962): pid=1684 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:40.212000 audit[1684]: CRED_DISP pid=1684 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:40.257747 kernel: audit: type=1104 audit(1696280620.212:963): pid=1684 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:03:40.301322 sshd[1681]: pam_unix(sshd:session): session closed for user core Oct 2 21:03:40.301000 audit[1681]: USER_END pid=1681 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:03:40.301000 audit[1681]: CRED_DISP pid=1681 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:03:40.329039 systemd-logind[1366]: Session 9 logged out. Waiting for processes to exit. Oct 2 21:03:40.330315 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 21:03:40.330513 systemd[1]: session-9.scope: Consumed 7.700s CPU time. Oct 2 21:03:40.331593 systemd-logind[1366]: Removed session 9. Oct 2 21:03:40.332199 systemd[1]: sshd@6-10.200.20.10:22-10.200.12.6:56728.service: Deactivated successfully. Oct 2 21:03:40.347504 kernel: audit: type=1106 audit(1696280620.301:964): pid=1681 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:03:40.347596 kernel: audit: type=1104 audit(1696280620.301:965): pid=1681 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:03:40.331000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.10:22-10.200.12.6:56728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:40.367996 kernel: audit: type=1131 audit(1696280620.331:966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.10:22-10.200.12.6:56728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:03:47.993000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521030 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 21:03:47.993000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000d5f9c0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:03:48.044782 kernel: audit: type=1400 audit(1696280627.993:967): avc: denied { watch } for pid=2353 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521030 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 21:03:48.044942 kernel: audit: type=1300 audit(1696280627.993:967): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000d5f9c0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:03:47.993000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:48.068293 kernel: audit: type=1327 audit(1696280627.993:967): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:49.282000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:49.287000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:49.326453 kernel: audit: type=1400 audit(1696280629.282:968): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:49.326587 kernel: audit: type=1400 audit(1696280629.287:969): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:49.287000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001350ea0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:03:49.355166 kernel: audit: type=1300 audit(1696280629.287:969): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001350ea0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:03:49.287000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:49.379064 kernel: audit: type=1327 audit(1696280629.287:969): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:49.379241 kernel: audit: type=1400 audit(1696280629.287:970): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:49.287000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:49.287000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001350ee0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:03:49.428408 kernel: audit: type=1300 audit(1696280629.287:970): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001350ee0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:03:49.287000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:49.451501 kernel: audit: type=1327 audit(1696280629.287:970): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:49.287000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:03:49.287000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001350f20 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:03:49.287000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:49.282000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001428bc0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:03:49.282000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:03:50.247722 kubelet[2490]: I1002 21:03:50.247690 2490 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 21:03:50.248367 env[1380]: time="2023-10-02T21:03:50.248326074Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 21:03:50.248818 kubelet[2490]: I1002 21:03:50.248796 2490 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 21:03:51.061010 kubelet[2490]: I1002 21:03:51.060965 2490 topology_manager.go:215] "Topology Admit Handler" podUID="a7d9f9e8-80a4-430a-b00d-990cbe33e973" podNamespace="kube-system" podName="kube-proxy-lzjg6" Oct 2 21:03:51.061178 kubelet[2490]: I1002 21:03:51.061081 2490 topology_manager.go:215] "Topology Admit Handler" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" podNamespace="kube-system" podName="cilium-kc26g" Oct 2 21:03:51.068830 systemd[1]: Created slice kubepods-burstable-podc2580e2e_ee32_476f_9366_e2ca40d51e3a.slice. Oct 2 21:03:51.077096 systemd[1]: Created slice kubepods-besteffort-poda7d9f9e8_80a4_430a_b00d_990cbe33e973.slice. Oct 2 21:03:51.097245 kubelet[2490]: W1002 21:03:51.096999 2490 reflector.go:535] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510.3.0-a-4ade0e9e10" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-4ade0e9e10' and this object Oct 2 21:03:51.097245 kubelet[2490]: E1002 21:03:51.097031 2490 reflector.go:147] object-"kube-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510.3.0-a-4ade0e9e10" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-4ade0e9e10' and this object Oct 2 21:03:51.097245 kubelet[2490]: W1002 21:03:51.097065 2490 reflector.go:535] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ci-3510.3.0-a-4ade0e9e10" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-4ade0e9e10' and this object Oct 2 21:03:51.097245 kubelet[2490]: E1002 21:03:51.097074 2490 reflector.go:147] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ci-3510.3.0-a-4ade0e9e10" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-4ade0e9e10' and this object Oct 2 21:03:51.097245 kubelet[2490]: W1002 21:03:51.097115 2490 reflector.go:535] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ci-3510.3.0-a-4ade0e9e10" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-4ade0e9e10' and this object Oct 2 21:03:51.097469 kubelet[2490]: E1002 21:03:51.097136 2490 reflector.go:147] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ci-3510.3.0-a-4ade0e9e10" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-4ade0e9e10' and this object Oct 2 21:03:51.097469 kubelet[2490]: W1002 21:03:51.097409 2490 reflector.go:535] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ci-3510.3.0-a-4ade0e9e10" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-4ade0e9e10' and this object Oct 2 21:03:51.097469 kubelet[2490]: E1002 21:03:51.097428 2490 reflector.go:147] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ci-3510.3.0-a-4ade0e9e10" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-4ade0e9e10' and this object Oct 2 21:03:51.097944 kubelet[2490]: W1002 21:03:51.097920 2490 reflector.go:535] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ci-3510.3.0-a-4ade0e9e10" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-4ade0e9e10' and this object Oct 2 21:03:51.098055 kubelet[2490]: E1002 21:03:51.098044 2490 reflector.go:147] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ci-3510.3.0-a-4ade0e9e10" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-4ade0e9e10' and this object Oct 2 21:03:51.185294 kubelet[2490]: I1002 21:03:51.185262 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-cgroup\") pod \"cilium-kc26g\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " pod="kube-system/cilium-kc26g" Oct 2 21:03:51.185438 kubelet[2490]: I1002 21:03:51.185308 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-lib-modules\") pod \"cilium-kc26g\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " pod="kube-system/cilium-kc26g" Oct 2 21:03:51.185438 kubelet[2490]: I1002 21:03:51.185329 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/a7d9f9e8-80a4-430a-b00d-990cbe33e973-kube-proxy\") pod \"kube-proxy-lzjg6\" (UID: \"a7d9f9e8-80a4-430a-b00d-990cbe33e973\") " pod="kube-system/kube-proxy-lzjg6" Oct 2 21:03:51.185438 kubelet[2490]: I1002 21:03:51.185380 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-run\") pod \"cilium-kc26g\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " pod="kube-system/cilium-kc26g" Oct 2 21:03:51.185438 kubelet[2490]: I1002 21:03:51.185400 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-w4whl\" (UniqueName: \"kubernetes.io/projected/a7d9f9e8-80a4-430a-b00d-990cbe33e973-kube-api-access-w4whl\") pod \"kube-proxy-lzjg6\" (UID: \"a7d9f9e8-80a4-430a-b00d-990cbe33e973\") " pod="kube-system/kube-proxy-lzjg6" Oct 2 21:03:51.185438 kubelet[2490]: I1002 21:03:51.185421 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cni-path\") pod \"cilium-kc26g\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " pod="kube-system/cilium-kc26g" Oct 2 21:03:51.185577 kubelet[2490]: I1002 21:03:51.185470 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-etc-cni-netd\") pod \"cilium-kc26g\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " pod="kube-system/cilium-kc26g" Oct 2 21:03:51.185577 kubelet[2490]: I1002 21:03:51.185489 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-xtables-lock\") pod \"cilium-kc26g\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " pod="kube-system/cilium-kc26g" Oct 2 21:03:51.185577 kubelet[2490]: I1002 21:03:51.185509 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-config-path\") pod \"cilium-kc26g\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " pod="kube-system/cilium-kc26g" Oct 2 21:03:51.185577 kubelet[2490]: I1002 21:03:51.185560 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-host-proc-sys-kernel\") pod \"cilium-kc26g\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " pod="kube-system/cilium-kc26g" Oct 2 21:03:51.185668 kubelet[2490]: I1002 21:03:51.185580 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/a7d9f9e8-80a4-430a-b00d-990cbe33e973-xtables-lock\") pod \"kube-proxy-lzjg6\" (UID: \"a7d9f9e8-80a4-430a-b00d-990cbe33e973\") " pod="kube-system/kube-proxy-lzjg6" Oct 2 21:03:51.185668 kubelet[2490]: I1002 21:03:51.185598 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/a7d9f9e8-80a4-430a-b00d-990cbe33e973-lib-modules\") pod \"kube-proxy-lzjg6\" (UID: \"a7d9f9e8-80a4-430a-b00d-990cbe33e973\") " pod="kube-system/kube-proxy-lzjg6" Oct 2 21:03:51.185668 kubelet[2490]: I1002 21:03:51.185645 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-hostproc\") pod \"cilium-kc26g\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " pod="kube-system/cilium-kc26g" Oct 2 21:03:51.185668 kubelet[2490]: I1002 21:03:51.185669 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c2580e2e-ee32-476f-9366-e2ca40d51e3a-hubble-tls\") pod \"cilium-kc26g\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " pod="kube-system/cilium-kc26g" Oct 2 21:03:51.185769 kubelet[2490]: I1002 21:03:51.185687 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c2580e2e-ee32-476f-9366-e2ca40d51e3a-clustermesh-secrets\") pod \"cilium-kc26g\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " pod="kube-system/cilium-kc26g" Oct 2 21:03:51.185802 kubelet[2490]: I1002 21:03:51.185780 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qbv5x\" (UniqueName: \"kubernetes.io/projected/c2580e2e-ee32-476f-9366-e2ca40d51e3a-kube-api-access-qbv5x\") pod \"cilium-kc26g\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " pod="kube-system/cilium-kc26g" Oct 2 21:03:51.185802 kubelet[2490]: I1002 21:03:51.185799 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-bpf-maps\") pod \"cilium-kc26g\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " pod="kube-system/cilium-kc26g" Oct 2 21:03:51.185870 kubelet[2490]: I1002 21:03:51.185853 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-host-proc-sys-net\") pod \"cilium-kc26g\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " pod="kube-system/cilium-kc26g" Oct 2 21:03:51.266662 kubelet[2490]: I1002 21:03:51.266610 2490 topology_manager.go:215] "Topology Admit Handler" podUID="8a010130-bc52-49c1-9a1a-47f0cc896bae" podNamespace="kube-system" podName="cilium-operator-6bc8ccdb58-ddv94" Oct 2 21:03:51.274712 systemd[1]: Created slice kubepods-besteffort-pod8a010130_bc52_49c1_9a1a_47f0cc896bae.slice. Oct 2 21:03:51.387871 kubelet[2490]: I1002 21:03:51.387844 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8a010130-bc52-49c1-9a1a-47f0cc896bae-cilium-config-path\") pod \"cilium-operator-6bc8ccdb58-ddv94\" (UID: \"8a010130-bc52-49c1-9a1a-47f0cc896bae\") " pod="kube-system/cilium-operator-6bc8ccdb58-ddv94" Oct 2 21:03:51.388066 kubelet[2490]: I1002 21:03:51.388054 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vcglc\" (UniqueName: \"kubernetes.io/projected/8a010130-bc52-49c1-9a1a-47f0cc896bae-kube-api-access-vcglc\") pod \"cilium-operator-6bc8ccdb58-ddv94\" (UID: \"8a010130-bc52-49c1-9a1a-47f0cc896bae\") " pod="kube-system/cilium-operator-6bc8ccdb58-ddv94" Oct 2 21:03:52.287874 kubelet[2490]: E1002 21:03:52.287847 2490 configmap.go:199] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 21:03:52.288335 kubelet[2490]: E1002 21:03:52.288318 2490 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-config-path podName:c2580e2e-ee32-476f-9366-e2ca40d51e3a nodeName:}" failed. No retries permitted until 2023-10-02 21:03:52.788293649 +0000 UTC m=+14.914650929 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-config-path") pod "cilium-kc26g" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a") : failed to sync configmap cache: timed out waiting for the condition Oct 2 21:03:52.288560 kubelet[2490]: E1002 21:03:52.288530 2490 configmap.go:199] Couldn't get configMap kube-system/kube-proxy: failed to sync configmap cache: timed out waiting for the condition Oct 2 21:03:52.288614 kubelet[2490]: E1002 21:03:52.288595 2490 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/a7d9f9e8-80a4-430a-b00d-990cbe33e973-kube-proxy podName:a7d9f9e8-80a4-430a-b00d-990cbe33e973 nodeName:}" failed. No retries permitted until 2023-10-02 21:03:52.78858069 +0000 UTC m=+14.914937970 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-proxy" (UniqueName: "kubernetes.io/configmap/a7d9f9e8-80a4-430a-b00d-990cbe33e973-kube-proxy") pod "kube-proxy-lzjg6" (UID: "a7d9f9e8-80a4-430a-b00d-990cbe33e973") : failed to sync configmap cache: timed out waiting for the condition Oct 2 21:03:52.288661 kubelet[2490]: E1002 21:03:52.288645 2490 secret.go:194] Couldn't get secret kube-system/cilium-clustermesh: failed to sync secret cache: timed out waiting for the condition Oct 2 21:03:52.288688 kubelet[2490]: E1002 21:03:52.288677 2490 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/c2580e2e-ee32-476f-9366-e2ca40d51e3a-clustermesh-secrets podName:c2580e2e-ee32-476f-9366-e2ca40d51e3a nodeName:}" failed. No retries permitted until 2023-10-02 21:03:52.78866913 +0000 UTC m=+14.915026410 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "clustermesh-secrets" (UniqueName: "kubernetes.io/secret/c2580e2e-ee32-476f-9366-e2ca40d51e3a-clustermesh-secrets") pod "cilium-kc26g" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a") : failed to sync secret cache: timed out waiting for the condition Oct 2 21:03:52.489614 kubelet[2490]: E1002 21:03:52.489579 2490 configmap.go:199] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 21:03:52.489813 kubelet[2490]: E1002 21:03:52.489653 2490 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/8a010130-bc52-49c1-9a1a-47f0cc896bae-cilium-config-path podName:8a010130-bc52-49c1-9a1a-47f0cc896bae nodeName:}" failed. No retries permitted until 2023-10-02 21:03:52.989635245 +0000 UTC m=+15.115992525 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/8a010130-bc52-49c1-9a1a-47f0cc896bae-cilium-config-path") pod "cilium-operator-6bc8ccdb58-ddv94" (UID: "8a010130-bc52-49c1-9a1a-47f0cc896bae") : failed to sync configmap cache: timed out waiting for the condition Oct 2 21:03:52.875024 env[1380]: time="2023-10-02T21:03:52.874588856Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-kc26g,Uid:c2580e2e-ee32-476f-9366-e2ca40d51e3a,Namespace:kube-system,Attempt:0,}" Oct 2 21:03:52.886398 env[1380]: time="2023-10-02T21:03:52.886359590Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-lzjg6,Uid:a7d9f9e8-80a4-430a-b00d-990cbe33e973,Namespace:kube-system,Attempt:0,}" Oct 2 21:03:52.924435 env[1380]: time="2023-10-02T21:03:52.924358075Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:03:52.924568 env[1380]: time="2023-10-02T21:03:52.924468875Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:03:52.924568 env[1380]: time="2023-10-02T21:03:52.924495835Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:03:52.924853 env[1380]: time="2023-10-02T21:03:52.924819755Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48 pid=2565 runtime=io.containerd.runc.v2 Oct 2 21:03:52.936215 env[1380]: time="2023-10-02T21:03:52.936146968Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:03:52.936488 env[1380]: time="2023-10-02T21:03:52.936447449Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:03:52.936600 env[1380]: time="2023-10-02T21:03:52.936577689Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:03:52.937026 env[1380]: time="2023-10-02T21:03:52.936980089Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cd5f618da7e818a1cdcb501afea0ec3d72ef4d64e421200cb9a81c5f263db0a2 pid=2588 runtime=io.containerd.runc.v2 Oct 2 21:03:52.940401 systemd[1]: Started cri-containerd-227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48.scope. Oct 2 21:03:52.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.963000 audit: BPF prog-id=113 op=LOAD Oct 2 21:03:52.964000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.964000 audit[2575]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2565 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:52.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232373633386636356261393664653536363539396636326632303531 Oct 2 21:03:52.964000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.964000 audit[2575]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2565 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:52.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232373633386636356261393664653536363539396636326632303531 Oct 2 21:03:52.964000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.964000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.964000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.964000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.964000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.964000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.964000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.964000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.964000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.964000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.964000 audit: BPF prog-id=114 op=LOAD Oct 2 21:03:52.964000 audit[2575]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2565 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:52.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232373633386636356261393664653536363539396636326632303531 Oct 2 21:03:52.965000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.965000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.965000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.965000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.965000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.965000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.965000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.965000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.965000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.965000 audit: BPF prog-id=115 op=LOAD Oct 2 21:03:52.965000 audit[2575]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2565 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:52.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232373633386636356261393664653536363539396636326632303531 Oct 2 21:03:52.966000 audit: BPF prog-id=115 op=UNLOAD Oct 2 21:03:52.966000 audit: BPF prog-id=114 op=UNLOAD Oct 2 21:03:52.967000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.967000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.967000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.967000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.967000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.967000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.967000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.967000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.967000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.967000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.967000 audit: BPF prog-id=116 op=LOAD Oct 2 21:03:52.967000 audit[2575]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2565 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:52.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232373633386636356261393664653536363539396636326632303531 Oct 2 21:03:52.973076 systemd[1]: run-containerd-runc-k8s.io-cd5f618da7e818a1cdcb501afea0ec3d72ef4d64e421200cb9a81c5f263db0a2-runc.ma3xlw.mount: Deactivated successfully. Oct 2 21:03:52.978780 systemd[1]: Started cri-containerd-cd5f618da7e818a1cdcb501afea0ec3d72ef4d64e421200cb9a81c5f263db0a2.scope. Oct 2 21:03:52.994906 env[1380]: time="2023-10-02T21:03:52.994866037Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-kc26g,Uid:c2580e2e-ee32-476f-9366-e2ca40d51e3a,Namespace:kube-system,Attempt:0,} returns sandbox id \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\"" Oct 2 21:03:52.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.004594 kernel: kauditd_printk_skb: 62 callbacks suppressed Oct 2 21:03:53.004676 kernel: audit: type=1400 audit(1696280632.997:990): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.009305 env[1380]: time="2023-10-02T21:03:53.009275334Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 21:03:52.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.039464 kernel: audit: type=1400 audit(1696280632.997:991): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.057512 kernel: audit: type=1400 audit(1696280632.997:992): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.075242 kernel: audit: type=1400 audit(1696280632.997:993): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.079320 env[1380]: time="2023-10-02T21:03:53.079287614Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-ddv94,Uid:8a010130-bc52-49c1-9a1a-47f0cc896bae,Namespace:kube-system,Attempt:0,}" Oct 2 21:03:53.092008 kernel: audit: type=1400 audit(1696280632.997:994): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.093881 env[1380]: time="2023-10-02T21:03:53.093841031Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-lzjg6,Uid:a7d9f9e8-80a4-430a-b00d-990cbe33e973,Namespace:kube-system,Attempt:0,} returns sandbox id \"cd5f618da7e818a1cdcb501afea0ec3d72ef4d64e421200cb9a81c5f263db0a2\"" Oct 2 21:03:53.099872 env[1380]: time="2023-10-02T21:03:53.099842838Z" level=info msg="CreateContainer within sandbox \"cd5f618da7e818a1cdcb501afea0ec3d72ef4d64e421200cb9a81c5f263db0a2\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 21:03:53.110071 kernel: audit: type=1400 audit(1696280632.997:995): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.110646 kernel: audit: type=1400 audit(1696280632.997:996): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.144774 kernel: audit: type=1400 audit(1696280632.997:997): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.163362 kernel: audit: type=1400 audit(1696280632.997:998): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.163470 kernel: audit: type=1400 audit(1696280632.997:999): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:52.997000 audit: BPF prog-id=117 op=LOAD Oct 2 21:03:53.007000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.007000 audit[2605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2588 pid=2605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364356636313864613765383138613163646362353031616665613065 Oct 2 21:03:53.007000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.007000 audit[2605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2588 pid=2605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364356636313864613765383138613163646362353031616665613065 Oct 2 21:03:53.008000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.008000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.008000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.008000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.008000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.008000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.008000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.008000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.008000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.008000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.008000 audit: BPF prog-id=118 op=LOAD Oct 2 21:03:53.008000 audit[2605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2588 pid=2605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.008000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364356636313864613765383138613163646362353031616665613065 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit: BPF prog-id=119 op=LOAD Oct 2 21:03:53.019000 audit[2605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2588 pid=2605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364356636313864613765383138613163646362353031616665613065 Oct 2 21:03:53.019000 audit: BPF prog-id=119 op=UNLOAD Oct 2 21:03:53.019000 audit: BPF prog-id=118 op=UNLOAD Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.019000 audit: BPF prog-id=120 op=LOAD Oct 2 21:03:53.019000 audit[2605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2588 pid=2605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364356636313864613765383138613163646362353031616665613065 Oct 2 21:03:53.217423 env[1380]: time="2023-10-02T21:03:53.217346092Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:03:53.217423 env[1380]: time="2023-10-02T21:03:53.217383172Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:03:53.217423 env[1380]: time="2023-10-02T21:03:53.217393412Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:03:53.217901 env[1380]: time="2023-10-02T21:03:53.217837973Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295 pid=2648 runtime=io.containerd.runc.v2 Oct 2 21:03:53.228478 env[1380]: time="2023-10-02T21:03:53.228439705Z" level=info msg="CreateContainer within sandbox \"cd5f618da7e818a1cdcb501afea0ec3d72ef4d64e421200cb9a81c5f263db0a2\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"cfd5e07208dc0b08c1cfbb9ff83e049c48bf58136d4f8740b6582abe5eb844a9\"" Oct 2 21:03:53.231263 env[1380]: time="2023-10-02T21:03:53.231177468Z" level=info msg="StartContainer for \"cfd5e07208dc0b08c1cfbb9ff83e049c48bf58136d4f8740b6582abe5eb844a9\"" Oct 2 21:03:53.234528 systemd[1]: Started cri-containerd-eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295.scope. Oct 2 21:03:53.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit: BPF prog-id=121 op=LOAD Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2648 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562376138393434326339653263356661323233306334316337613635 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2648 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562376138393434326339653263356661323233306334316337613635 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit: BPF prog-id=122 op=LOAD Oct 2 21:03:53.252000 audit[2659]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2648 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562376138393434326339653263356661323233306334316337613635 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit: BPF prog-id=123 op=LOAD Oct 2 21:03:53.252000 audit[2659]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2648 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562376138393434326339653263356661323233306334316337613635 Oct 2 21:03:53.252000 audit: BPF prog-id=123 op=UNLOAD Oct 2 21:03:53.252000 audit: BPF prog-id=122 op=UNLOAD Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { perfmon } for pid=2659 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit[2659]: AVC avc: denied { bpf } for pid=2659 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.252000 audit: BPF prog-id=124 op=LOAD Oct 2 21:03:53.252000 audit[2659]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2648 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562376138393434326339653263356661323233306334316337613635 Oct 2 21:03:53.266394 systemd[1]: Started cri-containerd-cfd5e07208dc0b08c1cfbb9ff83e049c48bf58136d4f8740b6582abe5eb844a9.scope. Oct 2 21:03:53.291965 env[1380]: time="2023-10-02T21:03:53.291865298Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-ddv94,Uid:8a010130-bc52-49c1-9a1a-47f0cc896bae,Namespace:kube-system,Attempt:0,} returns sandbox id \"eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295\"" Oct 2 21:03:53.293000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.293000 audit[2682]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2588 pid=2682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366643565303732303864633062303863316366626239666638336530 Oct 2 21:03:53.293000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.293000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.293000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.293000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.293000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.293000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.293000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.293000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.293000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.293000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.293000 audit: BPF prog-id=125 op=LOAD Oct 2 21:03:53.293000 audit[2682]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2588 pid=2682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366643565303732303864633062303863316366626239666638336530 Oct 2 21:03:53.294000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.294000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.294000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.294000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.294000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.294000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.294000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.294000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.294000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.294000 audit: BPF prog-id=126 op=LOAD Oct 2 21:03:53.294000 audit[2682]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2588 pid=2682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366643565303732303864633062303863316366626239666638336530 Oct 2 21:03:53.295000 audit: BPF prog-id=126 op=UNLOAD Oct 2 21:03:53.295000 audit: BPF prog-id=125 op=UNLOAD Oct 2 21:03:53.295000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.295000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.295000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.295000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.295000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.295000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.295000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.295000 audit[2682]: AVC avc: denied { perfmon } for pid=2682 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.295000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.295000 audit[2682]: AVC avc: denied { bpf } for pid=2682 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:03:53.295000 audit: BPF prog-id=127 op=LOAD Oct 2 21:03:53.295000 audit[2682]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2588 pid=2682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366643565303732303864633062303863316366626239666638336530 Oct 2 21:03:53.315990 env[1380]: time="2023-10-02T21:03:53.315948125Z" level=info msg="StartContainer for \"cfd5e07208dc0b08c1cfbb9ff83e049c48bf58136d4f8740b6582abe5eb844a9\" returns successfully" Oct 2 21:03:53.410000 audit[2737]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2737 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.410000 audit[2737]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdee8f400 a2=0 a3=ffff8184e6c0 items=0 ppid=2694 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.410000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 21:03:53.415000 audit[2738]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=2738 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.415000 audit[2738]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc4b63720 a2=0 a3=ffff849756c0 items=0 ppid=2694 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.415000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 21:03:53.417000 audit[2740]: NETFILTER_CFG table=nat:43 family=10 entries=1 op=nft_register_chain pid=2740 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.417000 audit[2740]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd106c160 a2=0 a3=ffff870e86c0 items=0 ppid=2694 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.417000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 21:03:53.419000 audit[2742]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=2742 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.419000 audit[2742]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeb60db70 a2=0 a3=ffff99b866c0 items=0 ppid=2694 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.419000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 21:03:53.421000 audit[2743]: NETFILTER_CFG table=filter:45 family=10 entries=1 op=nft_register_chain pid=2743 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.421000 audit[2743]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe1415290 a2=0 a3=ffffaee5a6c0 items=0 ppid=2694 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.421000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 21:03:53.421000 audit[2744]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_chain pid=2744 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.421000 audit[2744]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc18fe250 a2=0 a3=ffffbb17e6c0 items=0 ppid=2694 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.421000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 21:03:53.512000 audit[2745]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2745 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.512000 audit[2745]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffda2de050 a2=0 a3=ffffb84636c0 items=0 ppid=2694 pid=2745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.512000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 21:03:53.516000 audit[2747]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2747 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.516000 audit[2747]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffe006820 a2=0 a3=ffff8f2676c0 items=0 ppid=2694 pid=2747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.516000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 21:03:53.524000 audit[2750]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2750 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.524000 audit[2750]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffee59ce70 a2=0 a3=ffff88c376c0 items=0 ppid=2694 pid=2750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.524000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 21:03:53.525000 audit[2751]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_chain pid=2751 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.525000 audit[2751]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd594b430 a2=0 a3=ffff8bb136c0 items=0 ppid=2694 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.525000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 21:03:53.529000 audit[2753]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2753 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.529000 audit[2753]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe90181e0 a2=0 a3=ffff83e056c0 items=0 ppid=2694 pid=2753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.529000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 21:03:53.531000 audit[2754]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2754 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.531000 audit[2754]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffc446c80 a2=0 a3=ffffb7d926c0 items=0 ppid=2694 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.531000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 21:03:53.535000 audit[2756]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2756 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.535000 audit[2756]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe65dd730 a2=0 a3=ffff98f0e6c0 items=0 ppid=2694 pid=2756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.535000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 21:03:53.540000 audit[2759]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2759 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.540000 audit[2759]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffee4a4740 a2=0 a3=ffff9448a6c0 items=0 ppid=2694 pid=2759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.540000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 21:03:53.541000 audit[2760]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_chain pid=2760 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.541000 audit[2760]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcf3afd50 a2=0 a3=ffffa60486c0 items=0 ppid=2694 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.541000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 21:03:53.545000 audit[2762]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2762 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.545000 audit[2762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffeddff590 a2=0 a3=ffff9c09a6c0 items=0 ppid=2694 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.545000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 21:03:53.548000 audit[2763]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_chain pid=2763 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.548000 audit[2763]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff4dd4980 a2=0 a3=ffffa27d06c0 items=0 ppid=2694 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.548000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 21:03:53.552000 audit[2765]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2765 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.552000 audit[2765]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcb37aa00 a2=0 a3=ffff9a19a6c0 items=0 ppid=2694 pid=2765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.552000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 21:03:53.557000 audit[2768]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2768 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.557000 audit[2768]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcb993520 a2=0 a3=ffff96bec6c0 items=0 ppid=2694 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.557000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 21:03:53.562000 audit[2771]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2771 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.562000 audit[2771]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe9c739e0 a2=0 a3=ffffba9a46c0 items=0 ppid=2694 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.562000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 21:03:53.564000 audit[2772]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2772 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.564000 audit[2772]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe90ff840 a2=0 a3=ffff9725a6c0 items=0 ppid=2694 pid=2772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.564000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 21:03:53.567000 audit[2774]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.567000 audit[2774]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffc312eec0 a2=0 a3=ffff9380b6c0 items=0 ppid=2694 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.567000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:03:53.572000 audit[2777]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2777 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.572000 audit[2777]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc6028c10 a2=0 a3=ffffaa45a6c0 items=0 ppid=2694 pid=2777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.572000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:03:53.574000 audit[2778]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_chain pid=2778 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.574000 audit[2778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffef84a9d0 a2=0 a3=ffff9a9866c0 items=0 ppid=2694 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.574000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 21:03:53.577000 audit[2780]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_rule pid=2780 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:03:53.577000 audit[2780]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffe5444450 a2=0 a3=ffff8d9fb6c0 items=0 ppid=2694 pid=2780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.577000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 21:03:53.631000 audit[2786]: NETFILTER_CFG table=filter:66 family=2 entries=8 op=nft_register_rule pid=2786 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 21:03:53.631000 audit[2786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffeda1d4a0 a2=0 a3=ffffb75c96c0 items=0 ppid=2694 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.631000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:03:53.652000 audit[2786]: NETFILTER_CFG table=nat:67 family=2 entries=14 op=nft_register_chain pid=2786 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 21:03:53.652000 audit[2786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffeda1d4a0 a2=0 a3=ffffb75c96c0 items=0 ppid=2694 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.652000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:03:53.654000 audit[2791]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2791 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.654000 audit[2791]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff0e1e8a0 a2=0 a3=ffff989816c0 items=0 ppid=2694 pid=2791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.654000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 21:03:53.657000 audit[2793]: NETFILTER_CFG table=filter:69 family=10 entries=2 op=nft_register_chain pid=2793 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.657000 audit[2793]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffdecabef0 a2=0 a3=ffffbf51e6c0 items=0 ppid=2694 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.657000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 21:03:53.663000 audit[2796]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2796 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.663000 audit[2796]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffca68daa0 a2=0 a3=ffffa51676c0 items=0 ppid=2694 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.663000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 21:03:53.664000 audit[2797]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_chain pid=2797 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.664000 audit[2797]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffece0bdc0 a2=0 a3=ffffac6526c0 items=0 ppid=2694 pid=2797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.664000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 21:03:53.670000 audit[2799]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_rule pid=2799 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.670000 audit[2799]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe1404280 a2=0 a3=ffff9ad3c6c0 items=0 ppid=2694 pid=2799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.670000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 21:03:53.672000 audit[2800]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2800 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.672000 audit[2800]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc7a638c0 a2=0 a3=ffffa38b56c0 items=0 ppid=2694 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.672000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 21:03:53.675000 audit[2802]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2802 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.675000 audit[2802]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff70bb680 a2=0 a3=ffffb667c6c0 items=0 ppid=2694 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.675000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 21:03:53.680000 audit[2805]: NETFILTER_CFG table=filter:75 family=10 entries=2 op=nft_register_chain pid=2805 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.680000 audit[2805]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff9b7e290 a2=0 a3=ffff9c8336c0 items=0 ppid=2694 pid=2805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.680000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 21:03:53.682000 audit[2806]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_chain pid=2806 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.682000 audit[2806]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe73cf280 a2=0 a3=ffffac5756c0 items=0 ppid=2694 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.682000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 21:03:53.686000 audit[2808]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2808 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.686000 audit[2808]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd13a0960 a2=0 a3=ffffa578e6c0 items=0 ppid=2694 pid=2808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.686000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 21:03:53.687000 audit[2809]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_chain pid=2809 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.687000 audit[2809]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc65cead0 a2=0 a3=ffff8c62a6c0 items=0 ppid=2694 pid=2809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.687000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 21:03:53.691000 audit[2811]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=2811 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.691000 audit[2811]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdca21970 a2=0 a3=ffff92de26c0 items=0 ppid=2694 pid=2811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.691000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 21:03:53.696000 audit[2814]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2814 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.696000 audit[2814]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcdcd9690 a2=0 a3=ffffae47f6c0 items=0 ppid=2694 pid=2814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.696000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 21:03:53.703000 audit[2817]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2817 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.703000 audit[2817]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff8c81270 a2=0 a3=ffff9112a6c0 items=0 ppid=2694 pid=2817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.703000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 21:03:53.704000 audit[2818]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2818 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.704000 audit[2818]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe108fa50 a2=0 a3=ffff892956c0 items=0 ppid=2694 pid=2818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.704000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 21:03:53.708000 audit[2820]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2820 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.708000 audit[2820]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffde771750 a2=0 a3=ffffa4ae06c0 items=0 ppid=2694 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.708000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:03:53.713000 audit[2823]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2823 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.713000 audit[2823]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffc0cda490 a2=0 a3=ffffa26f66c0 items=0 ppid=2694 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.713000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:03:53.715000 audit[2824]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2824 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.715000 audit[2824]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff81d9090 a2=0 a3=ffffa23646c0 items=0 ppid=2694 pid=2824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.715000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 21:03:53.719000 audit[2826]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2826 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.719000 audit[2826]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffc4a3f150 a2=0 a3=ffff82e1f6c0 items=0 ppid=2694 pid=2826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.719000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 21:03:53.720000 audit[2827]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2827 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.720000 audit[2827]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffead30020 a2=0 a3=ffffa80b06c0 items=0 ppid=2694 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.720000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 21:03:53.724000 audit[2829]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2829 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.724000 audit[2829]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffee1c8320 a2=0 a3=ffff98cf66c0 items=0 ppid=2694 pid=2829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.724000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 21:03:53.729000 audit[2832]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_rule pid=2832 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:03:53.729000 audit[2832]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcf1a17b0 a2=0 a3=ffffa60066c0 items=0 ppid=2694 pid=2832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.729000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 21:03:53.733000 audit[2834]: NETFILTER_CFG table=filter:90 family=10 entries=3 op=nft_register_rule pid=2834 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 21:03:53.733000 audit[2834]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffc2cefe40 a2=0 a3=ffffb54bb6c0 items=0 ppid=2694 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.733000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:03:53.733000 audit[2834]: NETFILTER_CFG table=nat:91 family=10 entries=7 op=nft_register_chain pid=2834 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 21:03:53.733000 audit[2834]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffc2cefe40 a2=0 a3=ffffb54bb6c0 items=0 ppid=2694 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:03:53.733000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:03:54.115144 kubelet[2490]: I1002 21:03:54.115091 2490 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-lzjg6" podStartSLOduration=3.115028599 podCreationTimestamp="2023-10-02 21:03:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:03:54.114961679 +0000 UTC m=+16.241318959" watchObservedRunningTime="2023-10-02 21:03:54.115028599 +0000 UTC m=+16.241385879" Oct 2 21:03:57.829862 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2700353612.mount: Deactivated successfully. Oct 2 21:04:00.042329 env[1380]: time="2023-10-02T21:04:00.042280986Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:04:00.050372 env[1380]: time="2023-10-02T21:04:00.050319234Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:04:00.057093 env[1380]: time="2023-10-02T21:04:00.057055680Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:04:00.057769 env[1380]: time="2023-10-02T21:04:00.057740201Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 21:04:00.060406 env[1380]: time="2023-10-02T21:04:00.060379244Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 21:04:00.061689 env[1380]: time="2023-10-02T21:04:00.061654605Z" level=info msg="CreateContainer within sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 21:04:00.094026 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount215552700.mount: Deactivated successfully. Oct 2 21:04:00.098400 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2019472574.mount: Deactivated successfully. Oct 2 21:04:00.109933 env[1380]: time="2023-10-02T21:04:00.109880053Z" level=info msg="CreateContainer within sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1\"" Oct 2 21:04:00.110735 env[1380]: time="2023-10-02T21:04:00.110709374Z" level=info msg="StartContainer for \"c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1\"" Oct 2 21:04:00.138307 systemd[1]: Started cri-containerd-c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1.scope. Oct 2 21:04:00.149533 systemd[1]: cri-containerd-c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1.scope: Deactivated successfully. Oct 2 21:04:01.091571 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1-rootfs.mount: Deactivated successfully. Oct 2 21:04:01.883150 env[1380]: time="2023-10-02T21:04:01.883091394Z" level=info msg="shim disconnected" id=c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1 Oct 2 21:04:01.883150 env[1380]: time="2023-10-02T21:04:01.883146114Z" level=warning msg="cleaning up after shim disconnected" id=c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1 namespace=k8s.io Oct 2 21:04:01.883150 env[1380]: time="2023-10-02T21:04:01.883156234Z" level=info msg="cleaning up dead shim" Oct 2 21:04:01.901211 env[1380]: time="2023-10-02T21:04:01.901158371Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:04:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2859 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:04:01Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:04:01.901502 env[1380]: time="2023-10-02T21:04:01.901401052Z" level=error msg="copy shim log" error="read /proc/self/fd/95: file already closed" Oct 2 21:04:01.901820 env[1380]: time="2023-10-02T21:04:01.901787052Z" level=error msg="Failed to pipe stdout of container \"c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1\"" error="reading from a closed fifo" Oct 2 21:04:01.904696 env[1380]: time="2023-10-02T21:04:01.904661055Z" level=error msg="Failed to pipe stderr of container \"c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1\"" error="reading from a closed fifo" Oct 2 21:04:01.908823 env[1380]: time="2023-10-02T21:04:01.908767579Z" level=error msg="StartContainer for \"c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:04:01.909362 kubelet[2490]: E1002 21:04:01.909069 2490 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1" Oct 2 21:04:01.909362 kubelet[2490]: E1002 21:04:01.909285 2490 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:04:01.909362 kubelet[2490]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:04:01.909362 kubelet[2490]: rm /hostbin/cilium-mount Oct 2 21:04:01.911797 kubelet[2490]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qbv5x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:04:01.911882 kubelet[2490]: E1002 21:04:01.909333 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:04:02.129982 env[1380]: time="2023-10-02T21:04:02.129898271Z" level=info msg="CreateContainer within sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 21:04:02.164752 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1136595832.mount: Deactivated successfully. Oct 2 21:04:02.176342 env[1380]: time="2023-10-02T21:04:02.176297515Z" level=info msg="CreateContainer within sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c\"" Oct 2 21:04:02.176827 env[1380]: time="2023-10-02T21:04:02.176802636Z" level=info msg="StartContainer for \"040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c\"" Oct 2 21:04:02.204168 systemd[1]: Started cri-containerd-040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c.scope. Oct 2 21:04:02.219493 systemd[1]: cri-containerd-040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c.scope: Deactivated successfully. Oct 2 21:04:02.234895 env[1380]: time="2023-10-02T21:04:02.234836611Z" level=info msg="shim disconnected" id=040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c Oct 2 21:04:02.234895 env[1380]: time="2023-10-02T21:04:02.234893971Z" level=warning msg="cleaning up after shim disconnected" id=040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c namespace=k8s.io Oct 2 21:04:02.234895 env[1380]: time="2023-10-02T21:04:02.234904531Z" level=info msg="cleaning up dead shim" Oct 2 21:04:02.248188 env[1380]: time="2023-10-02T21:04:02.248105624Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:04:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2900 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:04:02Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:04:02.248418 env[1380]: time="2023-10-02T21:04:02.248360024Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 21:04:02.248614 env[1380]: time="2023-10-02T21:04:02.248573944Z" level=error msg="Failed to pipe stdout of container \"040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c\"" error="reading from a closed fifo" Oct 2 21:04:02.248795 env[1380]: time="2023-10-02T21:04:02.248769984Z" level=error msg="Failed to pipe stderr of container \"040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c\"" error="reading from a closed fifo" Oct 2 21:04:02.253106 env[1380]: time="2023-10-02T21:04:02.253068189Z" level=error msg="StartContainer for \"040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:04:02.254651 kubelet[2490]: E1002 21:04:02.254429 2490 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c" Oct 2 21:04:02.254651 kubelet[2490]: E1002 21:04:02.254520 2490 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:04:02.254651 kubelet[2490]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:04:02.254651 kubelet[2490]: rm /hostbin/cilium-mount Oct 2 21:04:02.254821 kubelet[2490]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qbv5x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:04:02.254951 kubelet[2490]: E1002 21:04:02.254554 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:04:03.126482 kubelet[2490]: I1002 21:04:03.126423 2490 scope.go:117] "RemoveContainer" containerID="c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1" Oct 2 21:04:03.126835 kubelet[2490]: I1002 21:04:03.126809 2490 scope.go:117] "RemoveContainer" containerID="c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1" Oct 2 21:04:03.147761 env[1380]: time="2023-10-02T21:04:03.147706879Z" level=info msg="RemoveContainer for \"c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1\"" Oct 2 21:04:03.148526 env[1380]: time="2023-10-02T21:04:03.148497359Z" level=info msg="RemoveContainer for \"c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1\"" Oct 2 21:04:03.148613 env[1380]: time="2023-10-02T21:04:03.148580919Z" level=error msg="RemoveContainer for \"c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1\" failed" error="failed to set removing state for container \"c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1\": container is already in removing state" Oct 2 21:04:03.148787 kubelet[2490]: E1002 21:04:03.148763 2490 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1\": container is already in removing state" containerID="c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1" Oct 2 21:04:03.148857 kubelet[2490]: E1002 21:04:03.148816 2490 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1": container is already in removing state; Skipping pod "cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)" Oct 2 21:04:03.149070 kubelet[2490]: E1002 21:04:03.149053 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:04:03.158378 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c-rootfs.mount: Deactivated successfully. Oct 2 21:04:03.159239 env[1380]: time="2023-10-02T21:04:03.159213409Z" level=info msg="RemoveContainer for \"c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1\" returns successfully" Oct 2 21:04:03.579837 env[1380]: time="2023-10-02T21:04:03.579728483Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:04:03.587907 env[1380]: time="2023-10-02T21:04:03.587863850Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:04:03.594404 env[1380]: time="2023-10-02T21:04:03.594374656Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:04:03.594904 env[1380]: time="2023-10-02T21:04:03.594876057Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 21:04:03.597329 env[1380]: time="2023-10-02T21:04:03.597004019Z" level=info msg="CreateContainer within sandbox \"eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 21:04:03.625379 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2230444311.mount: Deactivated successfully. Oct 2 21:04:03.631065 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1702176740.mount: Deactivated successfully. Oct 2 21:04:03.641245 env[1380]: time="2023-10-02T21:04:03.641209900Z" level=info msg="CreateContainer within sandbox \"eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544\"" Oct 2 21:04:03.643369 env[1380]: time="2023-10-02T21:04:03.642097661Z" level=info msg="StartContainer for \"eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544\"" Oct 2 21:04:03.662759 systemd[1]: Started cri-containerd-eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544.scope. Oct 2 21:04:03.687143 kernel: kauditd_printk_skb: 300 callbacks suppressed Oct 2 21:04:03.687267 kernel: audit: type=1400 audit(1696280643.680:1083): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.719995 kernel: audit: type=1400 audit(1696280643.680:1084): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.736942 kernel: audit: type=1400 audit(1696280643.680:1085): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.737034 kernel: audit: type=1400 audit(1696280643.680:1086): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.771140 kernel: audit: type=1400 audit(1696280643.680:1087): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.771811 kernel: audit: type=1400 audit(1696280643.680:1088): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.805250 kernel: audit: type=1400 audit(1696280643.680:1089): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.822553 kernel: audit: type=1400 audit(1696280643.680:1090): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.840002 kernel: audit: type=1400 audit(1696280643.680:1091): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.858390 kernel: audit: type=1400 audit(1696280643.680:1092): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.680000 audit: BPF prog-id=128 op=LOAD Oct 2 21:04:03.686000 audit[2921]: AVC avc: denied { bpf } for pid=2921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.686000 audit[2921]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2648 pid=2921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:04:03.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561646435613164653132633765333835363039666439343734333461 Oct 2 21:04:03.686000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.686000 audit[2921]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2648 pid=2921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:04:03.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561646435613164653132633765333835363039666439343734333461 Oct 2 21:04:03.686000 audit[2921]: AVC avc: denied { bpf } for pid=2921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.686000 audit[2921]: AVC avc: denied { bpf } for pid=2921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.686000 audit[2921]: AVC avc: denied { bpf } for pid=2921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.686000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.686000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.686000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.686000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.686000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.686000 audit[2921]: AVC avc: denied { bpf } for pid=2921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.686000 audit[2921]: AVC avc: denied { bpf } for pid=2921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.686000 audit: BPF prog-id=129 op=LOAD Oct 2 21:04:03.686000 audit[2921]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2648 pid=2921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:04:03.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561646435613164653132633765333835363039666439343734333461 Oct 2 21:04:03.702000 audit[2921]: AVC avc: denied { bpf } for pid=2921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.702000 audit[2921]: AVC avc: denied { bpf } for pid=2921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.702000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.702000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.702000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.702000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.702000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.702000 audit[2921]: AVC avc: denied { bpf } for pid=2921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.702000 audit[2921]: AVC avc: denied { bpf } for pid=2921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.702000 audit: BPF prog-id=130 op=LOAD Oct 2 21:04:03.702000 audit[2921]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2648 pid=2921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:04:03.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561646435613164653132633765333835363039666439343734333461 Oct 2 21:04:03.719000 audit: BPF prog-id=130 op=UNLOAD Oct 2 21:04:03.719000 audit: BPF prog-id=129 op=UNLOAD Oct 2 21:04:03.719000 audit[2921]: AVC avc: denied { bpf } for pid=2921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.719000 audit[2921]: AVC avc: denied { bpf } for pid=2921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.719000 audit[2921]: AVC avc: denied { bpf } for pid=2921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.719000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.719000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.719000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.719000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.719000 audit[2921]: AVC avc: denied { perfmon } for pid=2921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.719000 audit[2921]: AVC avc: denied { bpf } for pid=2921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.719000 audit[2921]: AVC avc: denied { bpf } for pid=2921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:04:03.719000 audit: BPF prog-id=131 op=LOAD Oct 2 21:04:03.719000 audit[2921]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2648 pid=2921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:04:03.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561646435613164653132633765333835363039666439343734333461 Oct 2 21:04:03.863381 env[1380]: time="2023-10-02T21:04:03.863334028Z" level=info msg="StartContainer for \"eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544\" returns successfully" Oct 2 21:04:03.871000 audit[2932]: AVC avc: denied { map_create } for pid=2932 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c354,c696 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c354,c696 tclass=bpf permissive=0 Oct 2 21:04:03.871000 audit[2932]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=400068f768 a2=48 a3=0 items=0 ppid=2648 pid=2932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c354,c696 key=(null) Oct 2 21:04:03.871000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 21:04:04.129807 kubelet[2490]: E1002 21:04:04.129542 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:04:04.987869 kubelet[2490]: W1002 21:04:04.987810 2490 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc2580e2e_ee32_476f_9366_e2ca40d51e3a.slice/cri-containerd-c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1.scope WatchSource:0}: container "c6b1567365c9cc1abb20c26dc8bd5c054cd064c7372b446103c2c43b60d8c5c1" in namespace "k8s.io": not found Oct 2 21:04:08.094231 kubelet[2490]: W1002 21:04:08.094199 2490 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc2580e2e_ee32_476f_9366_e2ca40d51e3a.slice/cri-containerd-040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c.scope WatchSource:0}: task 040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c not found: not found Oct 2 21:04:19.004875 env[1380]: time="2023-10-02T21:04:19.004830420Z" level=info msg="CreateContainer within sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 21:04:19.032011 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1386726143.mount: Deactivated successfully. Oct 2 21:04:19.036615 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount442687042.mount: Deactivated successfully. Oct 2 21:04:19.049087 env[1380]: time="2023-10-02T21:04:19.049007091Z" level=info msg="CreateContainer within sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2\"" Oct 2 21:04:19.051713 env[1380]: time="2023-10-02T21:04:19.051405213Z" level=info msg="StartContainer for \"1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2\"" Oct 2 21:04:19.096431 systemd[1]: Started cri-containerd-1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2.scope. Oct 2 21:04:19.122206 systemd[1]: cri-containerd-1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2.scope: Deactivated successfully. Oct 2 21:04:19.492654 env[1380]: time="2023-10-02T21:04:19.492589166Z" level=info msg="shim disconnected" id=1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2 Oct 2 21:04:19.492654 env[1380]: time="2023-10-02T21:04:19.492651966Z" level=warning msg="cleaning up after shim disconnected" id=1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2 namespace=k8s.io Oct 2 21:04:19.492654 env[1380]: time="2023-10-02T21:04:19.492662326Z" level=info msg="cleaning up dead shim" Oct 2 21:04:19.504439 env[1380]: time="2023-10-02T21:04:19.504383855Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:04:19Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2977 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:04:19Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:04:19.504715 env[1380]: time="2023-10-02T21:04:19.504655095Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 21:04:19.505209 env[1380]: time="2023-10-02T21:04:19.505171695Z" level=error msg="Failed to pipe stdout of container \"1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2\"" error="reading from a closed fifo" Oct 2 21:04:19.505275 env[1380]: time="2023-10-02T21:04:19.505238455Z" level=error msg="Failed to pipe stderr of container \"1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2\"" error="reading from a closed fifo" Oct 2 21:04:19.509581 env[1380]: time="2023-10-02T21:04:19.509538338Z" level=error msg="StartContainer for \"1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:04:19.509809 kubelet[2490]: E1002 21:04:19.509781 2490 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2" Oct 2 21:04:19.510067 kubelet[2490]: E1002 21:04:19.509913 2490 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:04:19.510067 kubelet[2490]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:04:19.510067 kubelet[2490]: rm /hostbin/cilium-mount Oct 2 21:04:19.510177 kubelet[2490]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qbv5x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:04:19.510177 kubelet[2490]: E1002 21:04:19.509952 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:04:20.029683 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2-rootfs.mount: Deactivated successfully. Oct 2 21:04:20.159235 kubelet[2490]: I1002 21:04:20.159208 2490 scope.go:117] "RemoveContainer" containerID="040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c" Oct 2 21:04:20.159559 kubelet[2490]: I1002 21:04:20.159540 2490 scope.go:117] "RemoveContainer" containerID="040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c" Oct 2 21:04:20.162210 env[1380]: time="2023-10-02T21:04:20.162168119Z" level=info msg="RemoveContainer for \"040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c\"" Oct 2 21:04:20.162880 env[1380]: time="2023-10-02T21:04:20.162849520Z" level=info msg="RemoveContainer for \"040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c\"" Oct 2 21:04:20.162953 env[1380]: time="2023-10-02T21:04:20.162932800Z" level=error msg="RemoveContainer for \"040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c\" failed" error="failed to set removing state for container \"040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c\": container is already in removing state" Oct 2 21:04:20.163136 kubelet[2490]: E1002 21:04:20.163113 2490 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c\": container is already in removing state" containerID="040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c" Oct 2 21:04:20.163256 kubelet[2490]: E1002 21:04:20.163245 2490 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c": container is already in removing state; Skipping pod "cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)" Oct 2 21:04:20.163629 kubelet[2490]: E1002 21:04:20.163611 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:04:20.176194 kubelet[2490]: I1002 21:04:20.176157 2490 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-6bc8ccdb58-ddv94" podStartSLOduration=18.874085692 podCreationTimestamp="2023-10-02 21:03:51 +0000 UTC" firstStartedPulling="2023-10-02 21:03:53.29341378 +0000 UTC m=+15.419771060" lastFinishedPulling="2023-10-02 21:04:03.595436217 +0000 UTC m=+25.721793497" observedRunningTime="2023-10-02 21:04:04.183988804 +0000 UTC m=+26.310346084" watchObservedRunningTime="2023-10-02 21:04:20.176108129 +0000 UTC m=+42.302465409" Oct 2 21:04:20.179793 env[1380]: time="2023-10-02T21:04:20.179756572Z" level=info msg="RemoveContainer for \"040bd8bc903585b2280c9d2f7e59dd078ac037b7da01e4359dd73b7f37ce598c\" returns successfully" Oct 2 21:04:22.597960 kubelet[2490]: W1002 21:04:22.597922 2490 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc2580e2e_ee32_476f_9366_e2ca40d51e3a.slice/cri-containerd-1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2.scope WatchSource:0}: task 1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2 not found: not found Oct 2 21:04:31.002815 kubelet[2490]: E1002 21:04:31.002786 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:04:34.629000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:34.635372 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 21:04:34.635460 kernel: audit: type=1400 audit(1696280674.629:1103): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:34.629000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:34.678290 kernel: audit: type=1400 audit(1696280674.629:1102): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:34.678405 kernel: audit: type=1300 audit(1696280674.629:1103): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001d020c0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:04:34.629000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001d020c0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:04:34.629000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:34.729816 kernel: audit: type=1327 audit(1696280674.629:1103): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:34.729905 kernel: audit: type=1300 audit(1696280674.629:1102): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d75ee0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:04:34.629000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d75ee0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:04:34.629000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:34.780813 kernel: audit: type=1327 audit(1696280674.629:1102): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:34.781436 kernel: audit: type=1400 audit(1696280674.775:1104): avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:34.775000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:34.775000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400487ea50 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:04:34.829572 kernel: audit: type=1300 audit(1696280674.775:1104): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400487ea50 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:04:34.775000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:04:34.853999 kernel: audit: type=1327 audit(1696280674.775:1104): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:04:34.776000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:34.876635 kernel: audit: type=1400 audit(1696280674.776:1105): avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:34.776000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40025fe660 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:04:34.776000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:04:34.779000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:34.779000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:34.779000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400ac049e0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:04:34.779000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:04:34.779000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400487eb70 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:04:34.779000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:04:34.779000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:34.779000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400487eba0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:04:34.779000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:04:34.828000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:34.828000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400ac04ae0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:04:34.828000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:04:45.005757 env[1380]: time="2023-10-02T21:04:45.005596414Z" level=info msg="CreateContainer within sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 21:04:45.032174 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2575002803.mount: Deactivated successfully. Oct 2 21:04:45.041833 env[1380]: time="2023-10-02T21:04:45.041785673Z" level=info msg="CreateContainer within sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5\"" Oct 2 21:04:45.042473 env[1380]: time="2023-10-02T21:04:45.042443633Z" level=info msg="StartContainer for \"1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5\"" Oct 2 21:04:45.077932 systemd[1]: Started cri-containerd-1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5.scope. Oct 2 21:04:45.092620 systemd[1]: cri-containerd-1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5.scope: Deactivated successfully. Oct 2 21:04:45.141316 env[1380]: time="2023-10-02T21:04:45.141252924Z" level=info msg="shim disconnected" id=1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5 Oct 2 21:04:45.141316 env[1380]: time="2023-10-02T21:04:45.141316084Z" level=warning msg="cleaning up after shim disconnected" id=1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5 namespace=k8s.io Oct 2 21:04:45.141519 env[1380]: time="2023-10-02T21:04:45.141325924Z" level=info msg="cleaning up dead shim" Oct 2 21:04:45.153051 env[1380]: time="2023-10-02T21:04:45.152996490Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:04:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3019 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:04:45Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:04:45.153315 env[1380]: time="2023-10-02T21:04:45.153261531Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 21:04:45.154450 env[1380]: time="2023-10-02T21:04:45.154413091Z" level=error msg="Failed to pipe stdout of container \"1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5\"" error="reading from a closed fifo" Oct 2 21:04:45.154583 env[1380]: time="2023-10-02T21:04:45.154556531Z" level=error msg="Failed to pipe stderr of container \"1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5\"" error="reading from a closed fifo" Oct 2 21:04:45.159312 env[1380]: time="2023-10-02T21:04:45.159264054Z" level=error msg="StartContainer for \"1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:04:45.159607 kubelet[2490]: E1002 21:04:45.159583 2490 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5" Oct 2 21:04:45.159906 kubelet[2490]: E1002 21:04:45.159681 2490 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:04:45.159906 kubelet[2490]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:04:45.159906 kubelet[2490]: rm /hostbin/cilium-mount Oct 2 21:04:45.159906 kubelet[2490]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qbv5x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:04:45.159906 kubelet[2490]: E1002 21:04:45.159716 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:04:45.201170 kubelet[2490]: I1002 21:04:45.200067 2490 scope.go:117] "RemoveContainer" containerID="1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2" Oct 2 21:04:45.201170 kubelet[2490]: I1002 21:04:45.200421 2490 scope.go:117] "RemoveContainer" containerID="1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2" Oct 2 21:04:45.209143 env[1380]: time="2023-10-02T21:04:45.207380199Z" level=info msg="RemoveContainer for \"1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2\"" Oct 2 21:04:45.209143 env[1380]: time="2023-10-02T21:04:45.209061919Z" level=info msg="RemoveContainer for \"1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2\"" Oct 2 21:04:45.209309 env[1380]: time="2023-10-02T21:04:45.209150359Z" level=error msg="RemoveContainer for \"1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2\" failed" error="failed to set removing state for container \"1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2\": container is already in removing state" Oct 2 21:04:45.209340 kubelet[2490]: E1002 21:04:45.209308 2490 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2\": container is already in removing state" containerID="1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2" Oct 2 21:04:45.209340 kubelet[2490]: E1002 21:04:45.209338 2490 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2": container is already in removing state; Skipping pod "cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)" Oct 2 21:04:45.209629 kubelet[2490]: E1002 21:04:45.209604 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:04:45.214817 env[1380]: time="2023-10-02T21:04:45.214775442Z" level=info msg="RemoveContainer for \"1948c1a2e4a4e0aed9e7688e87706e62ce2fdeae5437a77057a1ec9a9c699ee2\" returns successfully" Oct 2 21:04:46.029010 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5-rootfs.mount: Deactivated successfully. Oct 2 21:04:48.246317 kubelet[2490]: W1002 21:04:48.246268 2490 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc2580e2e_ee32_476f_9366_e2ca40d51e3a.slice/cri-containerd-1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5.scope WatchSource:0}: task 1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5 not found: not found Oct 2 21:04:49.290000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:49.296222 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 21:04:49.296325 kernel: audit: type=1400 audit(1696280689.290:1110): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:49.290000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000fff640 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:04:49.345997 kernel: audit: type=1300 audit(1696280689.290:1110): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000fff640 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:04:49.346111 kernel: audit: type=1327 audit(1696280689.290:1110): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:49.290000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:49.290000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:49.389741 kernel: audit: type=1400 audit(1696280689.290:1111): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:49.389841 kernel: audit: type=1300 audit(1696280689.290:1111): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000fff660 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:04:49.290000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000fff660 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:04:49.290000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:49.441137 kernel: audit: type=1327 audit(1696280689.290:1111): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:49.290000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:49.462787 kernel: audit: type=1400 audit(1696280689.290:1112): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:49.462883 kernel: audit: type=1300 audit(1696280689.290:1112): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000fff7c0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:04:49.290000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000fff7c0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:04:49.290000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:49.516345 kernel: audit: type=1327 audit(1696280689.290:1112): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:49.305000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:49.538723 kernel: audit: type=1400 audit(1696280689.305:1113): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:04:49.305000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000da0ac0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:04:49.305000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:04:58.009076 kubelet[2490]: E1002 21:04:58.009033 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:05:11.003172 kubelet[2490]: E1002 21:05:11.003089 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:05:25.003827 kubelet[2490]: E1002 21:05:25.003797 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:05:34.630000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:34.636302 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:05:34.636430 kernel: audit: type=1400 audit(1696280734.630:1114): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:34.630000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:34.679388 kernel: audit: type=1400 audit(1696280734.630:1115): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:34.630000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028225a0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:05:34.706942 kernel: audit: type=1300 audit(1696280734.630:1115): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028225a0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:05:34.630000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:34.730314 kernel: audit: type=1327 audit(1696280734.630:1115): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:34.730403 kernel: audit: type=1300 audit(1696280734.630:1114): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400277adb0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:05:34.630000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400277adb0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:05:34.630000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:34.781245 kernel: audit: type=1327 audit(1696280734.630:1114): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:34.776000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:34.803661 kernel: audit: type=1400 audit(1696280734.776:1116): avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:34.803785 kernel: audit: type=1300 audit(1696280734.776:1116): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40069e6d80 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:05:34.776000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40069e6d80 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:05:34.776000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:05:34.855955 kernel: audit: type=1327 audit(1696280734.776:1116): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:05:34.777000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:34.878909 kernel: audit: type=1400 audit(1696280734.777:1117): avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:34.777000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4006805ec0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:05:34.777000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:05:34.781000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:34.781000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40069e6ed0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:05:34.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:05:34.781000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:34.781000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4006805f20 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:05:34.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:05:34.781000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:34.781000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4009e9bd60 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:05:34.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:05:34.828000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:34.828000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400a17a660 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:05:34.828000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:05:37.006674 env[1380]: time="2023-10-02T21:05:37.005148713Z" level=info msg="CreateContainer within sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 21:05:37.028936 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount683772470.mount: Deactivated successfully. Oct 2 21:05:37.044509 env[1380]: time="2023-10-02T21:05:37.044466457Z" level=info msg="CreateContainer within sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead\"" Oct 2 21:05:37.044919 env[1380]: time="2023-10-02T21:05:37.044893682Z" level=info msg="StartContainer for \"6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead\"" Oct 2 21:05:37.067624 systemd[1]: Started cri-containerd-6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead.scope. Oct 2 21:05:37.086174 systemd[1]: cri-containerd-6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead.scope: Deactivated successfully. Oct 2 21:05:37.106655 env[1380]: time="2023-10-02T21:05:37.106601147Z" level=info msg="shim disconnected" id=6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead Oct 2 21:05:37.106655 env[1380]: time="2023-10-02T21:05:37.106650260Z" level=warning msg="cleaning up after shim disconnected" id=6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead namespace=k8s.io Oct 2 21:05:37.106655 env[1380]: time="2023-10-02T21:05:37.106660979Z" level=info msg="cleaning up dead shim" Oct 2 21:05:37.119384 env[1380]: time="2023-10-02T21:05:37.119333069Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:05:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3063 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:05:37Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:05:37.119645 env[1380]: time="2023-10-02T21:05:37.119588837Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 21:05:37.120213 env[1380]: time="2023-10-02T21:05:37.120178521Z" level=error msg="Failed to pipe stderr of container \"6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead\"" error="reading from a closed fifo" Oct 2 21:05:37.120745 env[1380]: time="2023-10-02T21:05:37.120717451Z" level=error msg="Failed to pipe stdout of container \"6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead\"" error="reading from a closed fifo" Oct 2 21:05:37.125333 env[1380]: time="2023-10-02T21:05:37.125285064Z" level=error msg="StartContainer for \"6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:05:37.125874 kubelet[2490]: E1002 21:05:37.125531 2490 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead" Oct 2 21:05:37.125874 kubelet[2490]: E1002 21:05:37.125814 2490 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:05:37.125874 kubelet[2490]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:05:37.125874 kubelet[2490]: rm /hostbin/cilium-mount Oct 2 21:05:37.125874 kubelet[2490]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qbv5x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:05:37.125874 kubelet[2490]: E1002 21:05:37.125856 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:05:37.285098 kubelet[2490]: I1002 21:05:37.283109 2490 scope.go:117] "RemoveContainer" containerID="1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5" Oct 2 21:05:37.285098 kubelet[2490]: I1002 21:05:37.283519 2490 scope.go:117] "RemoveContainer" containerID="1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5" Oct 2 21:05:37.285336 env[1380]: time="2023-10-02T21:05:37.285103592Z" level=info msg="RemoveContainer for \"1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5\"" Oct 2 21:05:37.288131 env[1380]: time="2023-10-02T21:05:37.288088088Z" level=info msg="RemoveContainer for \"1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5\"" Oct 2 21:05:37.288342 env[1380]: time="2023-10-02T21:05:37.288295141Z" level=error msg="RemoveContainer for \"1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5\" failed" error="failed to set removing state for container \"1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5\": container is already in removing state" Oct 2 21:05:37.288583 kubelet[2490]: E1002 21:05:37.288567 2490 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5\": container is already in removing state" containerID="1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5" Oct 2 21:05:37.288697 kubelet[2490]: E1002 21:05:37.288686 2490 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5": container is already in removing state; Skipping pod "cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)" Oct 2 21:05:37.289084 kubelet[2490]: E1002 21:05:37.289071 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:05:37.299667 env[1380]: time="2023-10-02T21:05:37.299629364Z" level=info msg="RemoveContainer for \"1a7230acc36398df4c242e7687f434f19fdebc3e687533d5e089069f0970f7d5\" returns successfully" Oct 2 21:05:38.026801 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead-rootfs.mount: Deactivated successfully. Oct 2 21:05:38.057738 kubelet[2490]: E1002 21:05:38.057708 2490 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 21:05:38.166416 kubelet[2490]: E1002 21:05:38.166388 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:40.214227 kubelet[2490]: W1002 21:05:40.212731 2490 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc2580e2e_ee32_476f_9366_e2ca40d51e3a.slice/cri-containerd-6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead.scope WatchSource:0}: task 6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead not found: not found Oct 2 21:05:43.167703 kubelet[2490]: E1002 21:05:43.167666 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:48.168294 kubelet[2490]: E1002 21:05:48.168255 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:49.003567 kubelet[2490]: E1002 21:05:49.003530 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:05:49.291000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:49.297441 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 21:05:49.297594 kernel: audit: type=1400 audit(1696280749.291:1123): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:49.291000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:49.339365 kernel: audit: type=1400 audit(1696280749.291:1122): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:49.339463 kernel: audit: type=1300 audit(1696280749.291:1123): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028ec000 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:05:49.291000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028ec000 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:05:49.291000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:49.390266 kernel: audit: type=1327 audit(1696280749.291:1123): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:49.390377 kernel: audit: type=1400 audit(1696280749.292:1124): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:49.292000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:49.292000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028ec1c0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:05:49.439240 kernel: audit: type=1300 audit(1696280749.292:1124): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028ec1c0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:05:49.292000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:49.462730 kernel: audit: type=1327 audit(1696280749.292:1124): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:49.462828 kernel: audit: type=1300 audit(1696280749.291:1122): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027e0000 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:05:49.291000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027e0000 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:05:49.291000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:49.513704 kernel: audit: type=1327 audit(1696280749.291:1122): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:49.306000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:49.534896 kernel: audit: type=1400 audit(1696280749.306:1125): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:05:49.306000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40028ec3e0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:05:49.306000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:05:53.169132 kubelet[2490]: E1002 21:05:53.169088 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:05:58.170541 kubelet[2490]: E1002 21:05:58.170455 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:03.171650 kubelet[2490]: E1002 21:06:03.171616 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:04.004508 kubelet[2490]: E1002 21:06:04.004448 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:06:07.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.10:22-10.200.12.6:33250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:07.657058 systemd[1]: Started sshd@7-10.200.20.10:22-10.200.12.6:33250.service. Oct 2 21:06:07.662096 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:06:07.662239 kernel: audit: type=1130 audit(1696280767.656:1126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.10:22-10.200.12.6:33250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:08.117000 audit[3080]: USER_ACCT pid=3080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:08.118852 sshd[3080]: Accepted publickey for core from 10.200.12.6 port 33250 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:06:08.142724 sshd[3080]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:06:08.143219 kernel: audit: type=1101 audit(1696280768.117:1127): pid=3080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:08.143303 kernel: audit: type=1103 audit(1696280768.141:1128): pid=3080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:08.141000 audit[3080]: CRED_ACQ pid=3080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:08.177917 kernel: audit: type=1006 audit(1696280768.141:1129): pid=3080 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 21:06:08.141000 audit[3080]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff51abd50 a2=3 a3=1 items=0 ppid=1 pid=3080 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:08.178806 kubelet[2490]: E1002 21:06:08.178753 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:08.200971 kernel: audit: type=1300 audit(1696280768.141:1129): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff51abd50 a2=3 a3=1 items=0 ppid=1 pid=3080 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:08.141000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:08.204558 systemd[1]: Started session-10.scope. Oct 2 21:06:08.205725 systemd-logind[1366]: New session 10 of user core. Oct 2 21:06:08.209685 kernel: audit: type=1327 audit(1696280768.141:1129): proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:08.211000 audit[3080]: USER_START pid=3080 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:08.214000 audit[3082]: CRED_ACQ pid=3082 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:08.258589 kernel: audit: type=1105 audit(1696280768.211:1130): pid=3080 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:08.258717 kernel: audit: type=1103 audit(1696280768.214:1131): pid=3082 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:08.571352 sshd[3080]: pam_unix(sshd:session): session closed for user core Oct 2 21:06:08.571000 audit[3080]: USER_END pid=3080 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:08.575494 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 21:06:08.576250 systemd[1]: sshd@7-10.200.20.10:22-10.200.12.6:33250.service: Deactivated successfully. Oct 2 21:06:08.572000 audit[3080]: CRED_DISP pid=3080 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:08.597999 systemd-logind[1366]: Session 10 logged out. Waiting for processes to exit. Oct 2 21:06:08.598922 systemd-logind[1366]: Removed session 10. Oct 2 21:06:08.617854 kernel: audit: type=1106 audit(1696280768.571:1132): pid=3080 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:08.617980 kernel: audit: type=1104 audit(1696280768.572:1133): pid=3080 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:08.575000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.10:22-10.200.12.6:33250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:13.179579 kubelet[2490]: E1002 21:06:13.179547 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:18.180466 kubelet[2490]: E1002 21:06:18.180442 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:18.667941 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:06:18.670177 kernel: audit: type=1130 audit(1696280778.641:1135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.10:22-10.200.12.6:43558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:18.641000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.10:22-10.200.12.6:43558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:18.642017 systemd[1]: Started sshd@8-10.200.20.10:22-10.200.12.6:43558.service. Oct 2 21:06:19.003719 kubelet[2490]: E1002 21:06:19.003389 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:06:19.068000 audit[3092]: USER_ACCT pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:19.069745 sshd[3092]: Accepted publickey for core from 10.200.12.6 port 43558 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:06:19.071909 sshd[3092]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:06:19.070000 audit[3092]: CRED_ACQ pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:19.114174 kernel: audit: type=1101 audit(1696280779.068:1136): pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:19.114294 kernel: audit: type=1103 audit(1696280779.070:1137): pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:19.128572 kernel: audit: type=1006 audit(1696280779.070:1138): pid=3092 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 21:06:19.070000 audit[3092]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0b798d0 a2=3 a3=1 items=0 ppid=1 pid=3092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:19.151388 kernel: audit: type=1300 audit(1696280779.070:1138): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0b798d0 a2=3 a3=1 items=0 ppid=1 pid=3092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:19.070000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:19.159450 kernel: audit: type=1327 audit(1696280779.070:1138): proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:19.162183 systemd-logind[1366]: New session 11 of user core. Oct 2 21:06:19.162808 systemd[1]: Started session-11.scope. Oct 2 21:06:19.165000 audit[3092]: USER_START pid=3092 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:19.169000 audit[3094]: CRED_ACQ pid=3094 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:19.192206 kernel: audit: type=1105 audit(1696280779.165:1139): pid=3092 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:19.213146 kernel: audit: type=1103 audit(1696280779.169:1140): pid=3094 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:19.492004 sshd[3092]: pam_unix(sshd:session): session closed for user core Oct 2 21:06:19.491000 audit[3092]: USER_END pid=3092 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:19.495263 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 21:06:19.495831 systemd[1]: sshd@8-10.200.20.10:22-10.200.12.6:43558.service: Deactivated successfully. Oct 2 21:06:19.492000 audit[3092]: CRED_DISP pid=3092 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:19.518883 systemd-logind[1366]: Session 11 logged out. Waiting for processes to exit. Oct 2 21:06:19.539555 kernel: audit: type=1106 audit(1696280779.491:1141): pid=3092 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:19.539664 kernel: audit: type=1104 audit(1696280779.492:1142): pid=3092 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:19.494000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.10:22-10.200.12.6:43558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:19.540298 systemd-logind[1366]: Removed session 11. Oct 2 21:06:23.181967 kubelet[2490]: E1002 21:06:23.181934 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:28.183364 kubelet[2490]: E1002 21:06:28.183338 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:29.569340 systemd[1]: Started sshd@9-10.200.20.10:22-10.200.12.6:43562.service. Oct 2 21:06:29.596344 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:06:29.596440 kernel: audit: type=1130 audit(1696280789.568:1144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.10:22-10.200.12.6:43562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:29.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.10:22-10.200.12.6:43562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:30.031000 audit[3106]: USER_ACCT pid=3106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:30.033168 sshd[3106]: Accepted publickey for core from 10.200.12.6 port 43562 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:06:30.035222 sshd[3106]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:06:30.033000 audit[3106]: CRED_ACQ pid=3106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:30.078587 kernel: audit: type=1101 audit(1696280790.031:1145): pid=3106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:30.078700 kernel: audit: type=1103 audit(1696280790.033:1146): pid=3106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:30.092558 kernel: audit: type=1006 audit(1696280790.033:1147): pid=3106 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 21:06:30.033000 audit[3106]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcdfe2930 a2=3 a3=1 items=0 ppid=1 pid=3106 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:30.115406 kernel: audit: type=1300 audit(1696280790.033:1147): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcdfe2930 a2=3 a3=1 items=0 ppid=1 pid=3106 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:30.033000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:30.123335 kernel: audit: type=1327 audit(1696280790.033:1147): proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:30.123602 systemd-logind[1366]: New session 12 of user core. Oct 2 21:06:30.124026 systemd[1]: Started session-12.scope. Oct 2 21:06:30.127000 audit[3106]: USER_START pid=3106 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:30.153000 audit[3108]: CRED_ACQ pid=3108 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:30.175236 kernel: audit: type=1105 audit(1696280790.127:1148): pid=3106 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:30.175373 kernel: audit: type=1103 audit(1696280790.153:1149): pid=3108 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:30.487367 sshd[3106]: pam_unix(sshd:session): session closed for user core Oct 2 21:06:30.487000 audit[3106]: USER_END pid=3106 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:30.491076 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 21:06:30.491814 systemd[1]: sshd@9-10.200.20.10:22-10.200.12.6:43562.service: Deactivated successfully. Oct 2 21:06:30.488000 audit[3106]: CRED_DISP pid=3106 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:30.514698 systemd-logind[1366]: Session 12 logged out. Waiting for processes to exit. Oct 2 21:06:30.515695 systemd-logind[1366]: Removed session 12. Oct 2 21:06:30.534319 kernel: audit: type=1106 audit(1696280790.487:1150): pid=3106 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:30.534407 kernel: audit: type=1104 audit(1696280790.488:1151): pid=3106 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:30.490000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.10:22-10.200.12.6:43562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:31.003059 kubelet[2490]: E1002 21:06:31.003030 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:06:33.185231 kubelet[2490]: E1002 21:06:33.185197 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:34.631000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:34.636955 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:06:34.637047 kernel: audit: type=1400 audit(1696280794.631:1153): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:34.631000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:34.679075 kernel: audit: type=1400 audit(1696280794.631:1154): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:34.679202 kernel: audit: type=1300 audit(1696280794.631:1154): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001069170 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:06:34.631000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001069170 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:06:34.631000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:34.730362 kernel: audit: type=1327 audit(1696280794.631:1154): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:34.730450 kernel: audit: type=1300 audit(1696280794.631:1153): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000195320 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:06:34.631000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000195320 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:06:34.631000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:34.781101 kernel: audit: type=1327 audit(1696280794.631:1153): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:34.777000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:34.802572 kernel: audit: type=1400 audit(1696280794.777:1155): avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:34.777000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400547c7e0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:06:34.828838 kernel: audit: type=1300 audit(1696280794.777:1155): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400547c7e0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:06:34.828937 kernel: audit: type=1327 audit(1696280794.777:1155): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:06:34.777000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:06:34.777000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:34.873797 kernel: audit: type=1400 audit(1696280794.777:1156): avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:34.777000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40053c40c0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:06:34.777000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:06:34.780000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:34.780000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400547c9c0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:06:34.780000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:06:34.780000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:34.780000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400547cb10 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:06:34.780000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:06:34.780000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:34.780000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40061897e0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:06:34.780000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:06:34.827000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:34.827000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4006189800 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:06:34.827000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:06:38.186437 kubelet[2490]: E1002 21:06:38.186408 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:40.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.10:22-10.200.12.6:43284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:40.557543 systemd[1]: Started sshd@10-10.200.20.10:22-10.200.12.6:43284.service. Oct 2 21:06:40.563144 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 21:06:40.563246 kernel: audit: type=1130 audit(1696280800.556:1161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.10:22-10.200.12.6:43284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:40.979000 audit[3121]: USER_ACCT pid=3121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:40.981356 sshd[3121]: Accepted publickey for core from 10.200.12.6 port 43284 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:06:40.983435 sshd[3121]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:06:40.981000 audit[3121]: CRED_ACQ pid=3121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:41.025602 kernel: audit: type=1101 audit(1696280800.979:1162): pid=3121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:41.025708 kernel: audit: type=1103 audit(1696280800.981:1163): pid=3121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:41.039375 kernel: audit: type=1006 audit(1696280800.982:1164): pid=3121 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 21:06:40.982000 audit[3121]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe24cf6a0 a2=3 a3=1 items=0 ppid=1 pid=3121 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:41.062806 kernel: audit: type=1300 audit(1696280800.982:1164): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe24cf6a0 a2=3 a3=1 items=0 ppid=1 pid=3121 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:40.982000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:41.071276 kernel: audit: type=1327 audit(1696280800.982:1164): proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:41.073607 systemd[1]: Started session-13.scope. Oct 2 21:06:41.073750 systemd-logind[1366]: New session 13 of user core. Oct 2 21:06:41.076000 audit[3121]: USER_START pid=3121 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:41.080000 audit[3123]: CRED_ACQ pid=3123 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:41.123597 kernel: audit: type=1105 audit(1696280801.076:1165): pid=3121 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:41.123692 kernel: audit: type=1103 audit(1696280801.080:1166): pid=3123 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:41.391345 sshd[3121]: pam_unix(sshd:session): session closed for user core Oct 2 21:06:41.391000 audit[3121]: USER_END pid=3121 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:41.398521 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 21:06:41.399226 systemd[1]: sshd@10-10.200.20.10:22-10.200.12.6:43284.service: Deactivated successfully. Oct 2 21:06:41.391000 audit[3121]: CRED_DISP pid=3121 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:41.437715 kernel: audit: type=1106 audit(1696280801.391:1167): pid=3121 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:41.437834 kernel: audit: type=1104 audit(1696280801.391:1168): pid=3121 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:41.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.10:22-10.200.12.6:43284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:41.437930 systemd-logind[1366]: Session 13 logged out. Waiting for processes to exit. Oct 2 21:06:41.438698 systemd-logind[1366]: Removed session 13. Oct 2 21:06:42.003512 kubelet[2490]: E1002 21:06:42.003484 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:06:43.187665 kubelet[2490]: E1002 21:06:43.187633 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:48.189098 kubelet[2490]: E1002 21:06:48.189061 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:49.293000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:49.298364 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:06:49.298467 kernel: audit: type=1400 audit(1696280809.293:1170): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:49.293000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000fbd0e0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:06:49.347144 kernel: audit: type=1300 audit(1696280809.293:1170): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000fbd0e0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:06:49.347256 kernel: audit: type=1327 audit(1696280809.293:1170): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:49.293000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:49.293000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:49.391185 kernel: audit: type=1400 audit(1696280809.293:1171): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:49.293000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001121300 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:06:49.419186 kernel: audit: type=1300 audit(1696280809.293:1171): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001121300 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:06:49.293000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:49.442643 kernel: audit: type=1327 audit(1696280809.293:1171): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:49.296000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:49.464943 kernel: audit: type=1400 audit(1696280809.296:1172): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:49.465093 kernel: audit: type=1300 audit(1696280809.296:1172): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000fbd200 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:06:49.296000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000fbd200 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:06:49.296000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:49.515790 kernel: audit: type=1327 audit(1696280809.296:1172): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:49.308000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:49.536825 kernel: audit: type=1400 audit(1696280809.308:1173): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:06:49.308000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001121420 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:06:49.308000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:06:51.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.10:22-10.200.12.6:33332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:51.463045 systemd[1]: Started sshd@11-10.200.20.10:22-10.200.12.6:33332.service. Oct 2 21:06:51.890434 sshd[3134]: Accepted publickey for core from 10.200.12.6 port 33332 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:06:51.889000 audit[3134]: USER_ACCT pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:51.890000 audit[3134]: CRED_ACQ pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:51.890000 audit[3134]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd3f89ec0 a2=3 a3=1 items=0 ppid=1 pid=3134 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:06:51.890000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:06:51.892397 sshd[3134]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:06:51.896250 systemd-logind[1366]: New session 14 of user core. Oct 2 21:06:51.896714 systemd[1]: Started session-14.scope. Oct 2 21:06:51.899000 audit[3134]: USER_START pid=3134 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:51.902000 audit[3136]: CRED_ACQ pid=3136 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:52.270490 sshd[3134]: pam_unix(sshd:session): session closed for user core Oct 2 21:06:52.270000 audit[3134]: USER_END pid=3134 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:52.270000 audit[3134]: CRED_DISP pid=3134 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:06:52.273575 systemd-logind[1366]: Session 14 logged out. Waiting for processes to exit. Oct 2 21:06:52.274617 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 21:06:52.275595 systemd-logind[1366]: Removed session 14. Oct 2 21:06:52.276110 systemd[1]: sshd@11-10.200.20.10:22-10.200.12.6:33332.service: Deactivated successfully. Oct 2 21:06:52.275000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.10:22-10.200.12.6:33332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:06:53.190274 kubelet[2490]: E1002 21:06:53.190251 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:06:57.003400 kubelet[2490]: E1002 21:06:57.003371 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:06:58.192301 kubelet[2490]: E1002 21:06:58.192269 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:02.372684 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 21:07:02.377530 kernel: audit: type=1130 audit(1696280822.346:1183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.10:22-10.200.12.6:52368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:02.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.10:22-10.200.12.6:52368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:02.347170 systemd[1]: Started sshd@12-10.200.20.10:22-10.200.12.6:52368.service. Oct 2 21:07:02.804000 audit[3150]: USER_ACCT pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:02.807543 sshd[3150]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:07:02.818303 sshd[3150]: Accepted publickey for core from 10.200.12.6 port 52368 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:07:02.806000 audit[3150]: CRED_ACQ pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:02.850095 kernel: audit: type=1101 audit(1696280822.804:1184): pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:02.850196 kernel: audit: type=1103 audit(1696280822.806:1185): pid=3150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:02.864563 kernel: audit: type=1006 audit(1696280822.806:1186): pid=3150 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 21:07:02.806000 audit[3150]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc64fb520 a2=3 a3=1 items=0 ppid=1 pid=3150 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:02.888804 kernel: audit: type=1300 audit(1696280822.806:1186): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc64fb520 a2=3 a3=1 items=0 ppid=1 pid=3150 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:02.806000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:02.899516 kernel: audit: type=1327 audit(1696280822.806:1186): proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:02.899152 systemd-logind[1366]: New session 15 of user core. Oct 2 21:07:02.899578 systemd[1]: Started session-15.scope. Oct 2 21:07:02.903000 audit[3150]: USER_START pid=3150 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:02.931000 audit[3155]: CRED_ACQ pid=3155 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:02.953809 kernel: audit: type=1105 audit(1696280822.903:1187): pid=3150 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:02.955259 kernel: audit: type=1103 audit(1696280822.931:1188): pid=3155 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:03.193098 kubelet[2490]: E1002 21:07:03.193063 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:03.259881 sshd[3150]: pam_unix(sshd:session): session closed for user core Oct 2 21:07:03.259000 audit[3150]: USER_END pid=3150 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:03.263748 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 21:07:03.264481 systemd[1]: sshd@12-10.200.20.10:22-10.200.12.6:52368.service: Deactivated successfully. Oct 2 21:07:03.259000 audit[3150]: CRED_DISP pid=3150 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:03.306627 kernel: audit: type=1106 audit(1696280823.259:1189): pid=3150 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:03.306711 kernel: audit: type=1104 audit(1696280823.259:1190): pid=3150 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:03.306764 systemd-logind[1366]: Session 15 logged out. Waiting for processes to exit. Oct 2 21:07:03.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.10:22-10.200.12.6:52368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:03.307688 systemd-logind[1366]: Removed session 15. Oct 2 21:07:08.193869 kubelet[2490]: E1002 21:07:08.193843 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:09.008956 env[1380]: time="2023-10-02T21:07:09.007396079Z" level=info msg="CreateContainer within sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 21:07:09.031277 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1584575992.mount: Deactivated successfully. Oct 2 21:07:09.043542 env[1380]: time="2023-10-02T21:07:09.043503531Z" level=info msg="CreateContainer within sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3\"" Oct 2 21:07:09.044085 env[1380]: time="2023-10-02T21:07:09.044048907Z" level=info msg="StartContainer for \"23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3\"" Oct 2 21:07:09.066080 systemd[1]: Started cri-containerd-23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3.scope. Oct 2 21:07:09.080974 systemd[1]: cri-containerd-23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3.scope: Deactivated successfully. Oct 2 21:07:09.114256 env[1380]: time="2023-10-02T21:07:09.114200583Z" level=info msg="shim disconnected" id=23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3 Oct 2 21:07:09.114256 env[1380]: time="2023-10-02T21:07:09.114256581Z" level=warning msg="cleaning up after shim disconnected" id=23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3 namespace=k8s.io Oct 2 21:07:09.114469 env[1380]: time="2023-10-02T21:07:09.114265661Z" level=info msg="cleaning up dead shim" Oct 2 21:07:09.126500 env[1380]: time="2023-10-02T21:07:09.126446525Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:07:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3188 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:07:09Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:07:09.126742 env[1380]: time="2023-10-02T21:07:09.126688874Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 21:07:09.126974 env[1380]: time="2023-10-02T21:07:09.126939103Z" level=error msg="Failed to pipe stdout of container \"23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3\"" error="reading from a closed fifo" Oct 2 21:07:09.127082 env[1380]: time="2023-10-02T21:07:09.127056858Z" level=error msg="Failed to pipe stderr of container \"23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3\"" error="reading from a closed fifo" Oct 2 21:07:09.131370 env[1380]: time="2023-10-02T21:07:09.131307231Z" level=error msg="StartContainer for \"23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:07:09.131852 kubelet[2490]: E1002 21:07:09.131567 2490 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3" Oct 2 21:07:09.131852 kubelet[2490]: E1002 21:07:09.131661 2490 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:07:09.131852 kubelet[2490]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:07:09.131852 kubelet[2490]: rm /hostbin/cilium-mount Oct 2 21:07:09.131852 kubelet[2490]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qbv5x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:07:09.131852 kubelet[2490]: E1002 21:07:09.131699 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:07:09.482618 kubelet[2490]: I1002 21:07:09.482446 2490 scope.go:117] "RemoveContainer" containerID="6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead" Oct 2 21:07:09.483436 kubelet[2490]: I1002 21:07:09.483230 2490 scope.go:117] "RemoveContainer" containerID="6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead" Oct 2 21:07:09.485012 env[1380]: time="2023-10-02T21:07:09.484978804Z" level=info msg="RemoveContainer for \"6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead\"" Oct 2 21:07:09.486294 env[1380]: time="2023-10-02T21:07:09.485612056Z" level=info msg="RemoveContainer for \"6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead\"" Oct 2 21:07:09.486294 env[1380]: time="2023-10-02T21:07:09.485717731Z" level=error msg="RemoveContainer for \"6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead\" failed" error="failed to set removing state for container \"6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead\": container is already in removing state" Oct 2 21:07:09.486400 kubelet[2490]: E1002 21:07:09.486226 2490 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead\": container is already in removing state" containerID="6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead" Oct 2 21:07:09.486400 kubelet[2490]: I1002 21:07:09.486271 2490 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead"} err="rpc error: code = Unknown desc = failed to set removing state for container \"6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead\": container is already in removing state" Oct 2 21:07:09.499028 env[1380]: time="2023-10-02T21:07:09.498989948Z" level=info msg="RemoveContainer for \"6470d2c864429ecdeef77f480309f24d1972fa03c16256d0d07b4f8562be3ead\" returns successfully" Oct 2 21:07:09.499543 kubelet[2490]: E1002 21:07:09.499527 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:07:10.026316 systemd[1]: run-containerd-runc-k8s.io-23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3-runc.n8Jr9M.mount: Deactivated successfully. Oct 2 21:07:10.026409 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3-rootfs.mount: Deactivated successfully. Oct 2 21:07:12.219566 kubelet[2490]: W1002 21:07:12.219530 2490 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc2580e2e_ee32_476f_9366_e2ca40d51e3a.slice/cri-containerd-23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3.scope WatchSource:0}: task 23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3 not found: not found Oct 2 21:07:13.195251 kubelet[2490]: E1002 21:07:13.195226 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:13.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.10:22-10.200.12.6:36878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:13.336460 systemd[1]: Started sshd@13-10.200.20.10:22-10.200.12.6:36878.service. Oct 2 21:07:13.341580 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:07:13.341679 kernel: audit: type=1130 audit(1696280833.335:1192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.10:22-10.200.12.6:36878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:13.793000 audit[3202]: USER_ACCT pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:13.794855 sshd[3202]: Accepted publickey for core from 10.200.12.6 port 36878 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:07:13.797491 sshd[3202]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:07:13.795000 audit[3202]: CRED_ACQ pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:13.839273 kernel: audit: type=1101 audit(1696280833.793:1193): pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:13.839395 kernel: audit: type=1103 audit(1696280833.795:1194): pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:13.852959 kernel: audit: type=1006 audit(1696280833.796:1195): pid=3202 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 21:07:13.853131 kernel: audit: type=1300 audit(1696280833.796:1195): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa6ac460 a2=3 a3=1 items=0 ppid=1 pid=3202 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:13.796000 audit[3202]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa6ac460 a2=3 a3=1 items=0 ppid=1 pid=3202 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:13.796000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:13.883741 kernel: audit: type=1327 audit(1696280833.796:1195): proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:13.885086 systemd[1]: Started session-16.scope. Oct 2 21:07:13.885603 systemd-logind[1366]: New session 16 of user core. Oct 2 21:07:13.888000 audit[3202]: USER_START pid=3202 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:13.889000 audit[3204]: CRED_ACQ pid=3204 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:13.935911 kernel: audit: type=1105 audit(1696280833.888:1196): pid=3202 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:13.936019 kernel: audit: type=1103 audit(1696280833.889:1197): pid=3204 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:14.222302 sshd[3202]: pam_unix(sshd:session): session closed for user core Oct 2 21:07:14.222000 audit[3202]: USER_END pid=3202 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:14.225759 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 21:07:14.226540 systemd[1]: sshd@13-10.200.20.10:22-10.200.12.6:36878.service: Deactivated successfully. Oct 2 21:07:14.223000 audit[3202]: CRED_DISP pid=3202 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:14.249969 systemd-logind[1366]: Session 16 logged out. Waiting for processes to exit. Oct 2 21:07:14.250914 systemd-logind[1366]: Removed session 16. Oct 2 21:07:14.270730 kernel: audit: type=1106 audit(1696280834.222:1198): pid=3202 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:14.270847 kernel: audit: type=1104 audit(1696280834.223:1199): pid=3202 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:14.225000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.10:22-10.200.12.6:36878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:18.196245 kubelet[2490]: E1002 21:07:18.196218 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:22.003226 kubelet[2490]: E1002 21:07:22.003188 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:07:23.197418 kubelet[2490]: E1002 21:07:23.197393 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:24.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.10:22-10.200.12.6:46326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:24.296548 systemd[1]: Started sshd@14-10.200.20.10:22-10.200.12.6:46326.service. Oct 2 21:07:24.304165 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:07:24.304264 kernel: audit: type=1130 audit(1696280844.295:1201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.10:22-10.200.12.6:46326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:24.752000 audit[3218]: USER_ACCT pid=3218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:24.753635 sshd[3218]: Accepted publickey for core from 10.200.12.6 port 46326 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:07:24.777741 sshd[3218]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:07:24.778199 kernel: audit: type=1101 audit(1696280844.752:1202): pid=3218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:24.778313 kernel: audit: type=1103 audit(1696280844.776:1203): pid=3218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:24.776000 audit[3218]: CRED_ACQ pid=3218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:24.813094 kernel: audit: type=1006 audit(1696280844.776:1204): pid=3218 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 21:07:24.813376 kernel: audit: type=1300 audit(1696280844.776:1204): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff27a16e0 a2=3 a3=1 items=0 ppid=1 pid=3218 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:24.776000 audit[3218]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff27a16e0 a2=3 a3=1 items=0 ppid=1 pid=3218 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:24.776000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:24.838986 systemd[1]: Started session-17.scope. Oct 2 21:07:24.840043 systemd-logind[1366]: New session 17 of user core. Oct 2 21:07:24.844209 kernel: audit: type=1327 audit(1696280844.776:1204): proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:24.844000 audit[3218]: USER_START pid=3218 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:24.847000 audit[3220]: CRED_ACQ pid=3220 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:24.890666 kernel: audit: type=1105 audit(1696280844.844:1205): pid=3218 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:24.890779 kernel: audit: type=1103 audit(1696280844.847:1206): pid=3220 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:25.175047 sshd[3218]: pam_unix(sshd:session): session closed for user core Oct 2 21:07:25.175000 audit[3218]: USER_END pid=3218 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:25.178340 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 21:07:25.179048 systemd[1]: sshd@14-10.200.20.10:22-10.200.12.6:46326.service: Deactivated successfully. Oct 2 21:07:25.175000 audit[3218]: CRED_DISP pid=3218 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:25.221967 kernel: audit: type=1106 audit(1696280845.175:1207): pid=3218 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:25.222096 kernel: audit: type=1104 audit(1696280845.175:1208): pid=3218 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:25.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.10:22-10.200.12.6:46326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:25.222287 systemd-logind[1366]: Session 17 logged out. Waiting for processes to exit. Oct 2 21:07:25.223006 systemd-logind[1366]: Removed session 17. Oct 2 21:07:28.198861 kubelet[2490]: E1002 21:07:28.198811 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:33.199461 kubelet[2490]: E1002 21:07:33.199425 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:34.003755 kubelet[2490]: E1002 21:07:34.003724 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:07:34.632000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:34.637674 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:07:34.637771 kernel: audit: type=1400 audit(1696280854.632:1210): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:34.633000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:34.679846 kernel: audit: type=1400 audit(1696280854.633:1211): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:34.679941 kernel: audit: type=1300 audit(1696280854.633:1211): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000da0340 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:07:34.633000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000da0340 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:07:34.633000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:07:34.730541 kernel: audit: type=1327 audit(1696280854.633:1211): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:07:34.730657 kernel: audit: type=1300 audit(1696280854.632:1210): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001c46c00 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:07:34.632000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001c46c00 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:07:34.632000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:07:34.780409 kernel: audit: type=1327 audit(1696280854.632:1210): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:07:34.779000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:34.801918 kernel: audit: type=1400 audit(1696280854.779:1212): avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:34.802026 kernel: audit: type=1300 audit(1696280854.779:1212): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c422ab0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:07:34.779000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c422ab0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:07:34.828153 kernel: audit: type=1327 audit(1696280854.779:1212): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:07:34.779000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:07:34.779000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:34.873254 kernel: audit: type=1400 audit(1696280854.779:1213): avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:34.779000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c131050 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:07:34.779000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:07:34.783000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:34.783000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c422ae0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:07:34.783000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:07:34.783000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:34.783000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c422b10 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:07:34.783000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:07:34.783000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:34.783000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c80e3e0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:07:34.783000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:07:34.831000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:34.831000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c5f0020 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:07:34.831000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:07:35.246501 systemd[1]: Started sshd@15-10.200.20.10:22-10.200.12.6:39224.service. Oct 2 21:07:35.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.10:22-10.200.12.6:39224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:35.672000 audit[3236]: USER_ACCT pid=3236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:35.673271 sshd[3236]: Accepted publickey for core from 10.200.12.6 port 39224 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:07:35.674000 audit[3236]: CRED_ACQ pid=3236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:35.674000 audit[3236]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1dafcf0 a2=3 a3=1 items=0 ppid=1 pid=3236 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:35.674000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:35.675101 sshd[3236]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:07:35.679400 systemd[1]: Started session-18.scope. Oct 2 21:07:35.679698 systemd-logind[1366]: New session 18 of user core. Oct 2 21:07:35.683000 audit[3236]: USER_START pid=3236 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:35.686000 audit[3238]: CRED_ACQ pid=3238 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:36.051001 sshd[3236]: pam_unix(sshd:session): session closed for user core Oct 2 21:07:36.051000 audit[3236]: USER_END pid=3236 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:36.051000 audit[3236]: CRED_DISP pid=3236 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:36.055000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.10:22-10.200.12.6:39224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:36.055058 systemd[1]: sshd@15-10.200.20.10:22-10.200.12.6:39224.service: Deactivated successfully. Oct 2 21:07:36.055817 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 21:07:36.056588 systemd-logind[1366]: Session 18 logged out. Waiting for processes to exit. Oct 2 21:07:36.057440 systemd-logind[1366]: Removed session 18. Oct 2 21:07:38.200800 kubelet[2490]: E1002 21:07:38.200754 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:43.202196 kubelet[2490]: E1002 21:07:43.202162 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:46.146815 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 21:07:46.146945 kernel: audit: type=1130 audit(1696280866.120:1227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.10:22-10.200.12.6:37660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:46.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.10:22-10.200.12.6:37660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:46.121738 systemd[1]: Started sshd@16-10.200.20.10:22-10.200.12.6:37660.service. Oct 2 21:07:46.542000 audit[3250]: USER_ACCT pid=3250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.547647 sshd[3250]: Accepted publickey for core from 10.200.12.6 port 37660 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:07:46.549679 sshd[3250]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:07:46.548000 audit[3250]: CRED_ACQ pid=3250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.587584 kernel: audit: type=1101 audit(1696280866.542:1228): pid=3250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.587663 kernel: audit: type=1103 audit(1696280866.548:1229): pid=3250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.591782 systemd[1]: Started session-19.scope. Oct 2 21:07:46.593411 systemd-logind[1366]: New session 19 of user core. Oct 2 21:07:46.601369 kernel: audit: type=1006 audit(1696280866.548:1230): pid=3250 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 21:07:46.548000 audit[3250]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc120c50 a2=3 a3=1 items=0 ppid=1 pid=3250 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:46.624077 kernel: audit: type=1300 audit(1696280866.548:1230): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc120c50 a2=3 a3=1 items=0 ppid=1 pid=3250 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:46.548000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:46.634931 kernel: audit: type=1327 audit(1696280866.548:1230): proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:46.623000 audit[3250]: USER_START pid=3250 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.634000 audit[3252]: CRED_ACQ pid=3252 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.662204 kernel: audit: type=1105 audit(1696280866.623:1231): pid=3250 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.685145 kernel: audit: type=1103 audit(1696280866.634:1232): pid=3252 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.944501 sshd[3250]: pam_unix(sshd:session): session closed for user core Oct 2 21:07:46.944000 audit[3250]: USER_END pid=3250 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.948538 systemd-logind[1366]: Session 19 logged out. Waiting for processes to exit. Oct 2 21:07:46.949785 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 21:07:46.951034 systemd-logind[1366]: Removed session 19. Oct 2 21:07:46.951721 systemd[1]: sshd@16-10.200.20.10:22-10.200.12.6:37660.service: Deactivated successfully. Oct 2 21:07:46.944000 audit[3250]: CRED_DISP pid=3250 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.990948 kernel: audit: type=1106 audit(1696280866.944:1233): pid=3250 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.991065 kernel: audit: type=1104 audit(1696280866.944:1234): pid=3250 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:46.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.10:22-10.200.12.6:37660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:47.021626 systemd[1]: Started sshd@17-10.200.20.10:22-10.200.12.6:37668.service. Oct 2 21:07:47.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.10:22-10.200.12.6:37668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:47.493000 audit[3263]: USER_ACCT pid=3263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:47.494739 sshd[3263]: Accepted publickey for core from 10.200.12.6 port 37668 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:07:47.495000 audit[3263]: CRED_ACQ pid=3263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:47.495000 audit[3263]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfb469b0 a2=3 a3=1 items=0 ppid=1 pid=3263 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:47.495000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:47.496590 sshd[3263]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:07:47.501067 systemd[1]: Started session-20.scope. Oct 2 21:07:47.501419 systemd-logind[1366]: New session 20 of user core. Oct 2 21:07:47.504000 audit[3263]: USER_START pid=3263 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:47.507000 audit[3265]: CRED_ACQ pid=3265 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:48.003541 kubelet[2490]: E1002 21:07:48.003503 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:07:48.203190 kubelet[2490]: E1002 21:07:48.203154 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:48.563543 sshd[3263]: pam_unix(sshd:session): session closed for user core Oct 2 21:07:48.563000 audit[3263]: USER_END pid=3263 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:48.563000 audit[3263]: CRED_DISP pid=3263 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:48.566352 systemd[1]: sshd@17-10.200.20.10:22-10.200.12.6:37668.service: Deactivated successfully. Oct 2 21:07:48.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.10:22-10.200.12.6:37668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:48.567108 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 21:07:48.567666 systemd-logind[1366]: Session 20 logged out. Waiting for processes to exit. Oct 2 21:07:48.568392 systemd-logind[1366]: Removed session 20. Oct 2 21:07:48.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.10:22-10.200.12.6:38166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:48.634818 systemd[1]: Started sshd@18-10.200.20.10:22-10.200.12.6:38166.service. Oct 2 21:07:49.060000 audit[3273]: USER_ACCT pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:49.061815 sshd[3273]: Accepted publickey for core from 10.200.12.6 port 38166 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:07:49.062000 audit[3273]: CRED_ACQ pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:49.062000 audit[3273]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc3809b0 a2=3 a3=1 items=0 ppid=1 pid=3273 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:49.062000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:07:49.063745 sshd[3273]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:07:49.068041 systemd[1]: Started session-21.scope. Oct 2 21:07:49.068436 systemd-logind[1366]: New session 21 of user core. Oct 2 21:07:49.072000 audit[3273]: USER_START pid=3273 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:49.075000 audit[3275]: CRED_ACQ pid=3275 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:49.294000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:49.294000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400200a000 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:07:49.294000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:07:49.294000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:49.294000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025ca000 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:07:49.294000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:07:49.295000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:49.295000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400200a120 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:07:49.295000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:07:49.308000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:07:49.308000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025ca140 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:07:49.308000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:07:49.444344 sshd[3273]: pam_unix(sshd:session): session closed for user core Oct 2 21:07:49.444000 audit[3273]: USER_END pid=3273 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:49.444000 audit[3273]: CRED_DISP pid=3273 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:49.447164 systemd-logind[1366]: Session 21 logged out. Waiting for processes to exit. Oct 2 21:07:49.448183 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 21:07:49.449338 systemd-logind[1366]: Removed session 21. Oct 2 21:07:49.449860 systemd[1]: sshd@18-10.200.20.10:22-10.200.12.6:38166.service: Deactivated successfully. Oct 2 21:07:49.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.10:22-10.200.12.6:38166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:53.204547 kubelet[2490]: E1002 21:07:53.204507 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:58.206383 kubelet[2490]: E1002 21:07:58.206355 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:07:59.514000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.10:22-10.200.12.6:38540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:59.515429 systemd[1]: Started sshd@19-10.200.20.10:22-10.200.12.6:38540.service. Oct 2 21:07:59.520508 kernel: kauditd_printk_skb: 35 callbacks suppressed Oct 2 21:07:59.520582 kernel: audit: type=1130 audit(1696280879.514:1258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.10:22-10.200.12.6:38540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:07:59.935000 audit[3287]: USER_ACCT pid=3287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:59.937306 sshd[3287]: Accepted publickey for core from 10.200.12.6 port 38540 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:07:59.939412 sshd[3287]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:07:59.937000 audit[3287]: CRED_ACQ pid=3287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:59.980104 kernel: audit: type=1101 audit(1696280879.935:1259): pid=3287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:59.980266 kernel: audit: type=1103 audit(1696280879.937:1260): pid=3287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:07:59.993574 kernel: audit: type=1006 audit(1696280879.937:1261): pid=3287 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 21:07:59.937000 audit[3287]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea496a30 a2=3 a3=1 items=0 ppid=1 pid=3287 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:00.004790 kubelet[2490]: E1002 21:08:00.004591 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:08:00.016095 kernel: audit: type=1300 audit(1696280879.937:1261): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea496a30 a2=3 a3=1 items=0 ppid=1 pid=3287 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:07:59.937000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:00.024336 kernel: audit: type=1327 audit(1696280879.937:1261): proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:00.026821 systemd[1]: Started session-22.scope. Oct 2 21:08:00.027246 systemd-logind[1366]: New session 22 of user core. Oct 2 21:08:00.030000 audit[3287]: USER_START pid=3287 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:00.033000 audit[3289]: CRED_ACQ pid=3289 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:00.076395 kernel: audit: type=1105 audit(1696280880.030:1262): pid=3287 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:00.076479 kernel: audit: type=1103 audit(1696280880.033:1263): pid=3289 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:00.342328 sshd[3287]: pam_unix(sshd:session): session closed for user core Oct 2 21:08:00.342000 audit[3287]: USER_END pid=3287 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:00.345730 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 21:08:00.346410 systemd[1]: sshd@19-10.200.20.10:22-10.200.12.6:38540.service: Deactivated successfully. Oct 2 21:08:00.343000 audit[3287]: CRED_DISP pid=3287 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:00.369141 systemd-logind[1366]: Session 22 logged out. Waiting for processes to exit. Oct 2 21:08:00.369963 systemd-logind[1366]: Removed session 22. Oct 2 21:08:00.388383 kernel: audit: type=1106 audit(1696280880.342:1264): pid=3287 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:00.388483 kernel: audit: type=1104 audit(1696280880.343:1265): pid=3287 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:00.345000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.10:22-10.200.12.6:38540 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:03.207772 kubelet[2490]: E1002 21:08:03.207706 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:08.208959 kubelet[2490]: E1002 21:08:08.208936 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:10.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.10:22-10.200.12.6:44062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:10.418852 systemd[1]: Started sshd@20-10.200.20.10:22-10.200.12.6:44062.service. Oct 2 21:08:10.423862 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:08:10.423965 kernel: audit: type=1130 audit(1696280890.417:1267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.10:22-10.200.12.6:44062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:10.876000 audit[3298]: USER_ACCT pid=3298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:10.877600 sshd[3298]: Accepted publickey for core from 10.200.12.6 port 44062 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:08:10.902146 kernel: audit: type=1101 audit(1696280890.876:1268): pid=3298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:10.902786 sshd[3298]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:08:10.901000 audit[3298]: CRED_ACQ pid=3298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:10.925265 kernel: audit: type=1103 audit(1696280890.901:1269): pid=3298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:10.925365 kernel: audit: type=1006 audit(1696280890.901:1270): pid=3298 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 21:08:10.930249 systemd[1]: Started session-23.scope. Oct 2 21:08:10.930685 systemd-logind[1366]: New session 23 of user core. Oct 2 21:08:10.901000 audit[3298]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc70cd6b0 a2=3 a3=1 items=0 ppid=1 pid=3298 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:10.962674 kernel: audit: type=1300 audit(1696280890.901:1270): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc70cd6b0 a2=3 a3=1 items=0 ppid=1 pid=3298 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:10.963180 kernel: audit: type=1327 audit(1696280890.901:1270): proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:10.901000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:10.938000 audit[3298]: USER_START pid=3298 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:10.995129 kernel: audit: type=1105 audit(1696280890.938:1271): pid=3298 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:10.995292 kernel: audit: type=1103 audit(1696280890.941:1272): pid=3300 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:10.941000 audit[3300]: CRED_ACQ pid=3300 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:11.016400 kubelet[2490]: E1002 21:08:11.016360 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:08:11.296986 sshd[3298]: pam_unix(sshd:session): session closed for user core Oct 2 21:08:11.297000 audit[3298]: USER_END pid=3298 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:11.300479 systemd-logind[1366]: Session 23 logged out. Waiting for processes to exit. Oct 2 21:08:11.301598 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 21:08:11.302671 systemd-logind[1366]: Removed session 23. Oct 2 21:08:11.303211 systemd[1]: sshd@20-10.200.20.10:22-10.200.12.6:44062.service: Deactivated successfully. Oct 2 21:08:11.297000 audit[3298]: CRED_DISP pid=3298 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:11.343153 kernel: audit: type=1106 audit(1696280891.297:1273): pid=3298 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:11.343248 kernel: audit: type=1104 audit(1696280891.297:1274): pid=3298 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:11.302000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.10:22-10.200.12.6:44062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:13.210719 kubelet[2490]: E1002 21:08:13.210689 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:18.212266 kubelet[2490]: E1002 21:08:18.212230 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:21.368631 systemd[1]: Started sshd@21-10.200.20.10:22-10.200.12.6:37398.service. Oct 2 21:08:21.367000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.10:22-10.200.12.6:37398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:21.374316 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:08:21.374426 kernel: audit: type=1130 audit(1696280901.367:1276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.10:22-10.200.12.6:37398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:21.795000 audit[3310]: USER_ACCT pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:21.797402 sshd[3310]: Accepted publickey for core from 10.200.12.6 port 37398 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:08:21.820157 kernel: audit: type=1101 audit(1696280901.795:1277): pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:21.820701 sshd[3310]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:08:21.819000 audit[3310]: CRED_ACQ pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:21.855670 kernel: audit: type=1103 audit(1696280901.819:1278): pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:21.855790 kernel: audit: type=1006 audit(1696280901.819:1279): pid=3310 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 21:08:21.819000 audit[3310]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffddcff1d0 a2=3 a3=1 items=0 ppid=1 pid=3310 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:21.859916 systemd[1]: Started session-24.scope. Oct 2 21:08:21.861415 systemd-logind[1366]: New session 24 of user core. Oct 2 21:08:21.878977 kernel: audit: type=1300 audit(1696280901.819:1279): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffddcff1d0 a2=3 a3=1 items=0 ppid=1 pid=3310 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:21.819000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:21.887284 kernel: audit: type=1327 audit(1696280901.819:1279): proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:21.889000 audit[3310]: USER_START pid=3310 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:21.892000 audit[3312]: CRED_ACQ pid=3312 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:21.917147 kernel: audit: type=1105 audit(1696280901.889:1280): pid=3310 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:21.939151 kernel: audit: type=1103 audit(1696280901.892:1281): pid=3312 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:22.203968 sshd[3310]: pam_unix(sshd:session): session closed for user core Oct 2 21:08:22.203000 audit[3310]: USER_END pid=3310 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:22.208206 systemd-logind[1366]: Session 24 logged out. Waiting for processes to exit. Oct 2 21:08:22.209375 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 21:08:22.210674 systemd-logind[1366]: Removed session 24. Oct 2 21:08:22.211341 systemd[1]: sshd@21-10.200.20.10:22-10.200.12.6:37398.service: Deactivated successfully. Oct 2 21:08:22.205000 audit[3310]: CRED_DISP pid=3310 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:22.250259 kernel: audit: type=1106 audit(1696280902.203:1282): pid=3310 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:22.250402 kernel: audit: type=1104 audit(1696280902.205:1283): pid=3310 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:22.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.10:22-10.200.12.6:37398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:23.213672 kubelet[2490]: E1002 21:08:23.213611 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:25.003088 kubelet[2490]: E1002 21:08:25.003050 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:08:28.215204 kubelet[2490]: E1002 21:08:28.215170 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:32.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.10:22-10.200.12.6:43984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:32.281007 systemd[1]: Started sshd@22-10.200.20.10:22-10.200.12.6:43984.service. Oct 2 21:08:32.286149 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:08:32.286245 kernel: audit: type=1130 audit(1696280912.280:1285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.10:22-10.200.12.6:43984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:32.744000 audit[3323]: USER_ACCT pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:32.746096 sshd[3323]: Accepted publickey for core from 10.200.12.6 port 43984 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:08:32.748232 sshd[3323]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:08:32.746000 audit[3323]: CRED_ACQ pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:32.789466 kernel: audit: type=1101 audit(1696280912.744:1286): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:32.789594 kernel: audit: type=1103 audit(1696280912.746:1287): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:32.803222 kernel: audit: type=1006 audit(1696280912.746:1288): pid=3323 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 21:08:32.746000 audit[3323]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1cf4140 a2=3 a3=1 items=0 ppid=1 pid=3323 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:32.826305 kernel: audit: type=1300 audit(1696280912.746:1288): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1cf4140 a2=3 a3=1 items=0 ppid=1 pid=3323 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:32.746000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:32.834114 kernel: audit: type=1327 audit(1696280912.746:1288): proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:32.835766 systemd-logind[1366]: New session 25 of user core. Oct 2 21:08:32.836226 systemd[1]: Started session-25.scope. Oct 2 21:08:32.839000 audit[3323]: USER_START pid=3323 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:32.842000 audit[3325]: CRED_ACQ pid=3325 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:32.885747 kernel: audit: type=1105 audit(1696280912.839:1289): pid=3323 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:32.885870 kernel: audit: type=1103 audit(1696280912.842:1290): pid=3325 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:33.173029 sshd[3323]: pam_unix(sshd:session): session closed for user core Oct 2 21:08:33.172000 audit[3323]: USER_END pid=3323 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:33.176704 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 21:08:33.177469 systemd[1]: sshd@22-10.200.20.10:22-10.200.12.6:43984.service: Deactivated successfully. Oct 2 21:08:33.173000 audit[3323]: CRED_DISP pid=3323 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:33.216703 kubelet[2490]: E1002 21:08:33.216589 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:33.218863 kernel: audit: type=1106 audit(1696280913.172:1291): pid=3323 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:33.218936 kernel: audit: type=1104 audit(1696280913.173:1292): pid=3323 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:33.218885 systemd-logind[1366]: Session 25 logged out. Waiting for processes to exit. Oct 2 21:08:33.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.10:22-10.200.12.6:43984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:33.219753 systemd-logind[1366]: Removed session 25. Oct 2 21:08:34.633000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:34.633000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001e3d9e0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:08:34.633000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:34.633000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:34.633000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001f1eb10 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:08:34.633000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:34.779000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:34.779000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:34.779000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4008aaa6c0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:08:34.779000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4004b1a210 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:08:34.779000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:08:34.779000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:08:34.783000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:34.783000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:34.783000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40091fd680 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:08:34.783000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:08:34.783000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:34.783000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4004b1a2d0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:08:34.783000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:08:34.783000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4008aaa810 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:08:34.783000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:08:34.832000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:34.832000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4009689a20 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:08:34.832000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:08:38.003771 kubelet[2490]: E1002 21:08:38.003740 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:08:38.118297 kubelet[2490]: W1002 21:08:38.118272 2490 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 21:08:38.217442 kubelet[2490]: E1002 21:08:38.217414 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:43.218975 kubelet[2490]: E1002 21:08:43.218943 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:43.270166 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 21:08:43.270259 kernel: audit: type=1130 audit(1696280923.244:1302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.10:22-10.200.12.6:56706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:43.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.10:22-10.200.12.6:56706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:43.244314 systemd[1]: Started sshd@23-10.200.20.10:22-10.200.12.6:56706.service. Oct 2 21:08:43.669000 audit[3337]: USER_ACCT pid=3337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:43.671354 sshd[3337]: Accepted publickey for core from 10.200.12.6 port 56706 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:08:43.692150 kernel: audit: type=1101 audit(1696280923.669:1303): pid=3337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:43.692000 audit[3337]: CRED_ACQ pid=3337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:43.692952 sshd[3337]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:08:43.727315 kernel: audit: type=1103 audit(1696280923.692:1304): pid=3337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:43.727411 kernel: audit: type=1006 audit(1696280923.692:1305): pid=3337 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 21:08:43.692000 audit[3337]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeec4e2f0 a2=3 a3=1 items=0 ppid=1 pid=3337 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:43.750337 kernel: audit: type=1300 audit(1696280923.692:1305): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeec4e2f0 a2=3 a3=1 items=0 ppid=1 pid=3337 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:43.692000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:43.754900 systemd[1]: Started session-26.scope. Oct 2 21:08:43.756187 systemd-logind[1366]: New session 26 of user core. Oct 2 21:08:43.759371 kernel: audit: type=1327 audit(1696280923.692:1305): proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:43.761000 audit[3337]: USER_START pid=3337 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:43.761000 audit[3339]: CRED_ACQ pid=3339 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:43.806392 kernel: audit: type=1105 audit(1696280923.761:1306): pid=3337 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:43.806480 kernel: audit: type=1103 audit(1696280923.761:1307): pid=3339 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:44.079871 sshd[3337]: pam_unix(sshd:session): session closed for user core Oct 2 21:08:44.080000 audit[3337]: USER_END pid=3337 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:44.083783 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 21:08:44.084550 systemd[1]: sshd@23-10.200.20.10:22-10.200.12.6:56706.service: Deactivated successfully. Oct 2 21:08:44.080000 audit[3337]: CRED_DISP pid=3337 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:44.126796 kernel: audit: type=1106 audit(1696280924.080:1308): pid=3337 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:44.126902 kernel: audit: type=1104 audit(1696280924.080:1309): pid=3337 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:44.126883 systemd-logind[1366]: Session 26 logged out. Waiting for processes to exit. Oct 2 21:08:44.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.10:22-10.200.12.6:56706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:44.127784 systemd-logind[1366]: Removed session 26. Oct 2 21:08:48.219984 kubelet[2490]: E1002 21:08:48.219953 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:49.003688 kubelet[2490]: E1002 21:08:49.003656 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:08:49.293000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:49.299972 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:08:49.300099 kernel: audit: type=1400 audit(1696280929.293:1311): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:49.293000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001350e80 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:08:49.348524 kernel: audit: type=1300 audit(1696280929.293:1311): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001350e80 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:08:49.293000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:49.371598 kernel: audit: type=1327 audit(1696280929.293:1311): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:49.294000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:49.392786 kernel: audit: type=1400 audit(1696280929.294:1312): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:49.294000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40014283a0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:08:49.421084 kernel: audit: type=1300 audit(1696280929.294:1312): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40014283a0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:08:49.421225 kernel: audit: type=1327 audit(1696280929.294:1312): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:49.294000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:49.296000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:49.465564 kernel: audit: type=1400 audit(1696280929.296:1313): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:49.465721 kernel: audit: type=1300 audit(1696280929.296:1313): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40014284c0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:08:49.296000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40014284c0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:08:49.296000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:49.516878 kernel: audit: type=1327 audit(1696280929.296:1313): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:49.516966 kernel: audit: type=1400 audit(1696280929.308:1314): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:49.308000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:08:49.308000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001350fa0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:08:49.308000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:08:53.220638 kubelet[2490]: E1002 21:08:53.220602 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:08:54.161147 systemd[1]: Started sshd@24-10.200.20.10:22-10.200.12.6:43116.service. Oct 2 21:08:54.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.10:22-10.200.12.6:43116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:54.619000 audit[3351]: USER_ACCT pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:54.622325 sshd[3351]: Accepted publickey for core from 10.200.12.6 port 43116 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:08:54.625612 kernel: kauditd_printk_skb: 3 callbacks suppressed Oct 2 21:08:54.625688 kernel: audit: type=1101 audit(1696280934.619:1316): pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:54.626084 sshd[3351]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:08:54.624000 audit[3351]: CRED_ACQ pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:54.669563 kernel: audit: type=1103 audit(1696280934.624:1317): pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:54.674019 systemd-logind[1366]: New session 27 of user core. Oct 2 21:08:54.685499 systemd[1]: Started session-27.scope. Oct 2 21:08:54.624000 audit[3351]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff75c8fd0 a2=3 a3=1 items=0 ppid=1 pid=3351 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:54.709062 kernel: audit: type=1006 audit(1696280934.624:1318): pid=3351 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 21:08:54.709162 kernel: audit: type=1300 audit(1696280934.624:1318): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff75c8fd0 a2=3 a3=1 items=0 ppid=1 pid=3351 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:08:54.624000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:54.716800 kernel: audit: type=1327 audit(1696280934.624:1318): proctitle=737368643A20636F7265205B707269765D Oct 2 21:08:54.715000 audit[3351]: USER_START pid=3351 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:54.741658 kernel: audit: type=1105 audit(1696280934.715:1319): pid=3351 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:54.715000 audit[3353]: CRED_ACQ pid=3353 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:54.761997 kernel: audit: type=1103 audit(1696280934.715:1320): pid=3353 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:55.053399 sshd[3351]: pam_unix(sshd:session): session closed for user core Oct 2 21:08:55.053000 audit[3351]: USER_END pid=3351 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:55.057964 systemd-logind[1366]: Session 27 logged out. Waiting for processes to exit. Oct 2 21:08:55.059196 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 21:08:55.060333 systemd-logind[1366]: Removed session 27. Oct 2 21:08:55.060967 systemd[1]: sshd@24-10.200.20.10:22-10.200.12.6:43116.service: Deactivated successfully. Oct 2 21:08:55.053000 audit[3351]: CRED_DISP pid=3351 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:55.099826 kernel: audit: type=1106 audit(1696280935.053:1321): pid=3351 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:55.099954 kernel: audit: type=1104 audit(1696280935.053:1322): pid=3351 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:08:55.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.10:22-10.200.12.6:43116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:55.119820 kernel: audit: type=1131 audit(1696280935.060:1323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.10:22-10.200.12.6:43116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:08:58.222177 kubelet[2490]: E1002 21:08:58.222145 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:03.222750 kubelet[2490]: E1002 21:09:03.222724 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:04.003806 kubelet[2490]: E1002 21:09:04.003773 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:09:05.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.10:22-10.200.12.6:47584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:05.131565 systemd[1]: Started sshd@25-10.200.20.10:22-10.200.12.6:47584.service. Oct 2 21:09:05.153185 kernel: audit: type=1130 audit(1696280945.130:1324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.10:22-10.200.12.6:47584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:05.597000 audit[3363]: USER_ACCT pid=3363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:05.598898 sshd[3363]: Accepted publickey for core from 10.200.12.6 port 47584 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:09:05.626801 sshd[3363]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:09:05.625000 audit[3363]: CRED_ACQ pid=3363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:05.648633 kernel: audit: type=1101 audit(1696280945.597:1325): pid=3363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:05.648741 kernel: audit: type=1103 audit(1696280945.625:1326): pid=3363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:05.662605 kernel: audit: type=1006 audit(1696280945.625:1327): pid=3363 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 21:09:05.625000 audit[3363]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe908bb00 a2=3 a3=1 items=0 ppid=1 pid=3363 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:05.685717 kernel: audit: type=1300 audit(1696280945.625:1327): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe908bb00 a2=3 a3=1 items=0 ppid=1 pid=3363 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:05.625000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:09:05.694110 kernel: audit: type=1327 audit(1696280945.625:1327): proctitle=737368643A20636F7265205B707269765D Oct 2 21:09:05.694522 systemd-logind[1366]: New session 28 of user core. Oct 2 21:09:05.695960 systemd[1]: Started session-28.scope. Oct 2 21:09:05.699000 audit[3363]: USER_START pid=3363 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:05.725000 audit[3365]: CRED_ACQ pid=3365 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:05.746505 kernel: audit: type=1105 audit(1696280945.699:1328): pid=3363 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:05.746609 kernel: audit: type=1103 audit(1696280945.725:1329): pid=3365 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:06.056454 sshd[3363]: pam_unix(sshd:session): session closed for user core Oct 2 21:09:06.056000 audit[3363]: USER_END pid=3363 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:06.057000 audit[3363]: CRED_DISP pid=3363 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:06.083252 systemd[1]: sshd@25-10.200.20.10:22-10.200.12.6:47584.service: Deactivated successfully. Oct 2 21:09:06.084006 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 21:09:06.103483 kernel: audit: type=1106 audit(1696280946.056:1330): pid=3363 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:06.103596 kernel: audit: type=1104 audit(1696280946.057:1331): pid=3363 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:06.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.10:22-10.200.12.6:47584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:06.104655 systemd-logind[1366]: Session 28 logged out. Waiting for processes to exit. Oct 2 21:09:06.105467 systemd-logind[1366]: Removed session 28. Oct 2 21:09:08.224470 kubelet[2490]: E1002 21:09:08.224440 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:13.225424 kubelet[2490]: E1002 21:09:13.225388 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:16.141304 systemd[1]: Started sshd@26-10.200.20.10:22-10.200.12.6:39238.service. Oct 2 21:09:16.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.10:22-10.200.12.6:39238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:16.146411 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:09:16.146503 kernel: audit: type=1130 audit(1696280956.140:1333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.10:22-10.200.12.6:39238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:16.591000 audit[3376]: USER_ACCT pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:16.593551 sshd[3376]: Accepted publickey for core from 10.200.12.6 port 39238 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:09:16.621719 kernel: audit: type=1101 audit(1696280956.591:1334): pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:16.621800 kernel: audit: type=1103 audit(1696280956.616:1335): pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:16.616000 audit[3376]: CRED_ACQ pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:16.617731 sshd[3376]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:09:16.653250 kernel: audit: type=1006 audit(1696280956.616:1336): pid=3376 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 21:09:16.616000 audit[3376]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe59e9870 a2=3 a3=1 items=0 ppid=1 pid=3376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:16.676721 kernel: audit: type=1300 audit(1696280956.616:1336): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe59e9870 a2=3 a3=1 items=0 ppid=1 pid=3376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:16.616000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:09:16.685020 kernel: audit: type=1327 audit(1696280956.616:1336): proctitle=737368643A20636F7265205B707269765D Oct 2 21:09:16.688332 systemd-logind[1366]: New session 29 of user core. Oct 2 21:09:16.688573 systemd[1]: Started session-29.scope. Oct 2 21:09:16.691000 audit[3376]: USER_START pid=3376 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:16.718000 audit[3378]: CRED_ACQ pid=3378 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:16.740851 kernel: audit: type=1105 audit(1696280956.691:1337): pid=3376 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:16.740953 kernel: audit: type=1103 audit(1696280956.718:1338): pid=3378 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:17.048341 sshd[3376]: pam_unix(sshd:session): session closed for user core Oct 2 21:09:17.048000 audit[3376]: USER_END pid=3376 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:17.074523 systemd[1]: sshd@26-10.200.20.10:22-10.200.12.6:39238.service: Deactivated successfully. Oct 2 21:09:17.049000 audit[3376]: CRED_DISP pid=3376 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:17.075148 kernel: audit: type=1106 audit(1696280957.048:1339): pid=3376 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:17.075275 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 21:09:17.096059 systemd-logind[1366]: Session 29 logged out. Waiting for processes to exit. Oct 2 21:09:17.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.10:22-10.200.12.6:39238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:17.097097 systemd-logind[1366]: Removed session 29. Oct 2 21:09:17.097215 kernel: audit: type=1104 audit(1696280957.049:1340): pid=3376 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:18.226247 kubelet[2490]: E1002 21:09:18.226222 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:19.003100 kubelet[2490]: E1002 21:09:19.003069 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:09:23.227834 kubelet[2490]: E1002 21:09:23.227795 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:27.142963 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:09:27.143074 kernel: audit: type=1130 audit(1696280967.118:1342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.10:22-10.200.12.6:36292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:27.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.10:22-10.200.12.6:36292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:27.118060 systemd[1]: Started sshd@27-10.200.20.10:22-10.200.12.6:36292.service. Oct 2 21:09:27.544000 audit[3390]: USER_ACCT pid=3390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:27.545312 sshd[3390]: Accepted publickey for core from 10.200.12.6 port 36292 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:09:27.547603 sshd[3390]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:09:27.547000 audit[3390]: CRED_ACQ pid=3390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:27.588892 kernel: audit: type=1101 audit(1696280967.544:1343): pid=3390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:27.589045 kernel: audit: type=1103 audit(1696280967.547:1344): pid=3390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:27.603478 kernel: audit: type=1006 audit(1696280967.547:1345): pid=3390 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 21:09:27.603582 kernel: audit: type=1300 audit(1696280967.547:1345): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd52112f0 a2=3 a3=1 items=0 ppid=1 pid=3390 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:27.547000 audit[3390]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd52112f0 a2=3 a3=1 items=0 ppid=1 pid=3390 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:27.593918 systemd-logind[1366]: New session 30 of user core. Oct 2 21:09:27.594379 systemd[1]: Started session-30.scope. Oct 2 21:09:27.547000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:09:27.634755 kernel: audit: type=1327 audit(1696280967.547:1345): proctitle=737368643A20636F7265205B707269765D Oct 2 21:09:27.599000 audit[3390]: USER_START pid=3390 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:27.665139 kernel: audit: type=1105 audit(1696280967.599:1346): pid=3390 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:27.665332 kernel: audit: type=1103 audit(1696280967.602:1347): pid=3392 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:27.602000 audit[3392]: CRED_ACQ pid=3392 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:27.920321 sshd[3390]: pam_unix(sshd:session): session closed for user core Oct 2 21:09:27.921000 audit[3390]: USER_END pid=3390 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:27.947114 systemd[1]: sshd@27-10.200.20.10:22-10.200.12.6:36292.service: Deactivated successfully. Oct 2 21:09:27.921000 audit[3390]: CRED_DISP pid=3390 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:27.968145 kernel: audit: type=1106 audit(1696280967.921:1348): pid=3390 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:27.968252 kernel: audit: type=1104 audit(1696280967.921:1349): pid=3390 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:27.947898 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 21:09:27.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.10:22-10.200.12.6:36292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:27.968893 systemd-logind[1366]: Session 30 logged out. Waiting for processes to exit. Oct 2 21:09:27.969787 systemd-logind[1366]: Removed session 30. Oct 2 21:09:27.991013 systemd[1]: Started sshd@28-10.200.20.10:22-10.200.12.6:36880.service. Oct 2 21:09:27.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.10:22-10.200.12.6:36880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:28.229894 kubelet[2490]: E1002 21:09:28.229460 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:28.419000 audit[3402]: USER_ACCT pid=3402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:28.420305 sshd[3402]: Accepted publickey for core from 10.200.12.6 port 36880 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:09:28.421000 audit[3402]: CRED_ACQ pid=3402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:28.421000 audit[3402]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6cf14e0 a2=3 a3=1 items=0 ppid=1 pid=3402 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:28.421000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:09:28.422237 sshd[3402]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:09:28.426520 systemd[1]: Started session-31.scope. Oct 2 21:09:28.426839 systemd-logind[1366]: New session 31 of user core. Oct 2 21:09:28.430000 audit[3402]: USER_START pid=3402 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:28.433000 audit[3404]: CRED_ACQ pid=3404 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:31.003004 kubelet[2490]: E1002 21:09:31.002935 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-kc26g_kube-system(c2580e2e-ee32-476f-9366-e2ca40d51e3a)\"" pod="kube-system/cilium-kc26g" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" Oct 2 21:09:31.130835 env[1380]: time="2023-10-02T21:09:31.130791391Z" level=info msg="StopContainer for \"eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544\" with timeout 30 (s)" Oct 2 21:09:31.131205 env[1380]: time="2023-10-02T21:09:31.131164424Z" level=info msg="Stop container \"eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544\" with signal terminated" Oct 2 21:09:31.145084 systemd[1]: cri-containerd-eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544.scope: Deactivated successfully. Oct 2 21:09:31.145000 audit: BPF prog-id=128 op=UNLOAD Oct 2 21:09:31.149000 audit: BPF prog-id=131 op=UNLOAD Oct 2 21:09:31.168403 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544-rootfs.mount: Deactivated successfully. Oct 2 21:09:31.169745 kubelet[2490]: E1002 21:09:31.169713 2490 configmap.go:199] Couldn't get configMap kube-system/cilium-config: configmap "cilium-config" not found Oct 2 21:09:31.169873 kubelet[2490]: E1002 21:09:31.169776 2490 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-config-path podName:c2580e2e-ee32-476f-9366-e2ca40d51e3a nodeName:}" failed. No retries permitted until 2023-10-02 21:09:31.669759182 +0000 UTC m=+353.796116462 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-config-path") pod "cilium-kc26g" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a") : configmap "cilium-config" not found Oct 2 21:09:31.246580 env[1380]: time="2023-10-02T21:09:31.246537668Z" level=info msg="shim disconnected" id=eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544 Oct 2 21:09:31.246858 env[1380]: time="2023-10-02T21:09:31.246838582Z" level=warning msg="cleaning up after shim disconnected" id=eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544 namespace=k8s.io Oct 2 21:09:31.246926 env[1380]: time="2023-10-02T21:09:31.246913541Z" level=info msg="cleaning up dead shim" Oct 2 21:09:31.259097 env[1380]: time="2023-10-02T21:09:31.258690336Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:09:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3429 runtime=io.containerd.runc.v2\n" Oct 2 21:09:31.263815 env[1380]: time="2023-10-02T21:09:31.263784550Z" level=info msg="StopContainer for \"eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544\" returns successfully" Oct 2 21:09:31.264520 env[1380]: time="2023-10-02T21:09:31.264495415Z" level=info msg="StopPodSandbox for \"eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295\"" Oct 2 21:09:31.264671 env[1380]: time="2023-10-02T21:09:31.264652332Z" level=info msg="Container to stop \"eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:09:31.267353 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295-shm.mount: Deactivated successfully. Oct 2 21:09:31.275528 systemd[1]: cri-containerd-eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295.scope: Deactivated successfully. Oct 2 21:09:31.275000 audit: BPF prog-id=121 op=UNLOAD Oct 2 21:09:31.279000 audit: BPF prog-id=124 op=UNLOAD Oct 2 21:09:31.306656 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295-rootfs.mount: Deactivated successfully. Oct 2 21:09:31.323385 env[1380]: time="2023-10-02T21:09:31.323329794Z" level=info msg="shim disconnected" id=eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295 Oct 2 21:09:31.323385 env[1380]: time="2023-10-02T21:09:31.323381353Z" level=warning msg="cleaning up after shim disconnected" id=eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295 namespace=k8s.io Oct 2 21:09:31.323612 env[1380]: time="2023-10-02T21:09:31.323391313Z" level=info msg="cleaning up dead shim" Oct 2 21:09:31.335498 env[1380]: time="2023-10-02T21:09:31.335454982Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:09:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3458 runtime=io.containerd.runc.v2\n" Oct 2 21:09:31.335767 env[1380]: time="2023-10-02T21:09:31.335736496Z" level=info msg="TearDown network for sandbox \"eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295\" successfully" Oct 2 21:09:31.335809 env[1380]: time="2023-10-02T21:09:31.335763176Z" level=info msg="StopPodSandbox for \"eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295\" returns successfully" Oct 2 21:09:31.471212 kubelet[2490]: I1002 21:09:31.471172 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8a010130-bc52-49c1-9a1a-47f0cc896bae-cilium-config-path\") pod \"8a010130-bc52-49c1-9a1a-47f0cc896bae\" (UID: \"8a010130-bc52-49c1-9a1a-47f0cc896bae\") " Oct 2 21:09:31.471392 kubelet[2490]: I1002 21:09:31.471221 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-vcglc\" (UniqueName: \"kubernetes.io/projected/8a010130-bc52-49c1-9a1a-47f0cc896bae-kube-api-access-vcglc\") pod \"8a010130-bc52-49c1-9a1a-47f0cc896bae\" (UID: \"8a010130-bc52-49c1-9a1a-47f0cc896bae\") " Oct 2 21:09:31.473556 kubelet[2490]: I1002 21:09:31.473529 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/8a010130-bc52-49c1-9a1a-47f0cc896bae-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "8a010130-bc52-49c1-9a1a-47f0cc896bae" (UID: "8a010130-bc52-49c1-9a1a-47f0cc896bae"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 21:09:31.476284 kubelet[2490]: I1002 21:09:31.476261 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/8a010130-bc52-49c1-9a1a-47f0cc896bae-kube-api-access-vcglc" (OuterVolumeSpecName: "kube-api-access-vcglc") pod "8a010130-bc52-49c1-9a1a-47f0cc896bae" (UID: "8a010130-bc52-49c1-9a1a-47f0cc896bae"). InnerVolumeSpecName "kube-api-access-vcglc". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:09:31.476366 systemd[1]: var-lib-kubelet-pods-8a010130\x2dbc52\x2d49c1\x2d9a1a\x2d47f0cc896bae-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dvcglc.mount: Deactivated successfully. Oct 2 21:09:31.572553 kubelet[2490]: I1002 21:09:31.572028 2490 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-vcglc\" (UniqueName: \"kubernetes.io/projected/8a010130-bc52-49c1-9a1a-47f0cc896bae-kube-api-access-vcglc\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:31.572553 kubelet[2490]: I1002 21:09:31.572064 2490 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8a010130-bc52-49c1-9a1a-47f0cc896bae-cilium-config-path\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:31.672786 kubelet[2490]: E1002 21:09:31.672748 2490 configmap.go:199] Couldn't get configMap kube-system/cilium-config: configmap "cilium-config" not found Oct 2 21:09:31.673004 kubelet[2490]: E1002 21:09:31.672992 2490 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-config-path podName:c2580e2e-ee32-476f-9366-e2ca40d51e3a nodeName:}" failed. No retries permitted until 2023-10-02 21:09:32.672973575 +0000 UTC m=+354.799330855 (durationBeforeRetry 1s). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-config-path") pod "cilium-kc26g" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a") : configmap "cilium-config" not found Oct 2 21:09:31.746458 systemd[1]: Removed slice kubepods-besteffort-pod8a010130_bc52_49c1_9a1a_47f0cc896bae.slice. Oct 2 21:09:31.747179 env[1380]: time="2023-10-02T21:09:31.747147115Z" level=info msg="StopPodSandbox for \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\"" Oct 2 21:09:31.747478 kubelet[2490]: I1002 21:09:31.745759 2490 scope.go:117] "RemoveContainer" containerID="eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544" Oct 2 21:09:31.747758 env[1380]: time="2023-10-02T21:09:31.747730183Z" level=info msg="Container to stop \"23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:09:31.749370 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48-shm.mount: Deactivated successfully. Oct 2 21:09:31.759716 env[1380]: time="2023-10-02T21:09:31.759665335Z" level=info msg="RemoveContainer for \"eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544\"" Oct 2 21:09:31.764772 systemd[1]: cri-containerd-227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48.scope: Deactivated successfully. Oct 2 21:09:31.764000 audit: BPF prog-id=113 op=UNLOAD Oct 2 21:09:31.769000 audit: BPF prog-id=116 op=UNLOAD Oct 2 21:09:31.773634 env[1380]: time="2023-10-02T21:09:31.773592566Z" level=info msg="RemoveContainer for \"eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544\" returns successfully" Oct 2 21:09:31.774088 kubelet[2490]: I1002 21:09:31.774046 2490 scope.go:117] "RemoveContainer" containerID="eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544" Oct 2 21:09:31.774574 env[1380]: time="2023-10-02T21:09:31.774488707Z" level=error msg="ContainerStatus for \"eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544\": not found" Oct 2 21:09:31.774944 kubelet[2490]: E1002 21:09:31.774926 2490 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544\": not found" containerID="eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544" Oct 2 21:09:31.775069 kubelet[2490]: I1002 21:09:31.775056 2490 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544"} err="failed to get container status \"eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544\": rpc error: code = NotFound desc = an error occurred when try to find container \"eadd5a1de12c7e385609fd947434a2f991fecaf2a4b61843853addf2bbfe1544\": not found" Oct 2 21:09:31.806186 env[1380]: time="2023-10-02T21:09:31.806141690Z" level=info msg="shim disconnected" id=227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48 Oct 2 21:09:31.806416 env[1380]: time="2023-10-02T21:09:31.806397325Z" level=warning msg="cleaning up after shim disconnected" id=227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48 namespace=k8s.io Oct 2 21:09:31.806505 env[1380]: time="2023-10-02T21:09:31.806492363Z" level=info msg="cleaning up dead shim" Oct 2 21:09:31.817573 env[1380]: time="2023-10-02T21:09:31.817532733Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:09:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3489 runtime=io.containerd.runc.v2\n" Oct 2 21:09:31.817973 env[1380]: time="2023-10-02T21:09:31.817948325Z" level=info msg="TearDown network for sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" successfully" Oct 2 21:09:31.818060 env[1380]: time="2023-10-02T21:09:31.818042963Z" level=info msg="StopPodSandbox for \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" returns successfully" Oct 2 21:09:31.974522 kubelet[2490]: I1002 21:09:31.974485 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-host-proc-sys-kernel\") pod \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " Oct 2 21:09:31.974522 kubelet[2490]: I1002 21:09:31.974528 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-run\") pod \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " Oct 2 21:09:31.974733 kubelet[2490]: I1002 21:09:31.974558 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-etc-cni-netd\") pod \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " Oct 2 21:09:31.974733 kubelet[2490]: I1002 21:09:31.974576 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cni-path\") pod \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " Oct 2 21:09:31.974733 kubelet[2490]: I1002 21:09:31.974597 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-hostproc\") pod \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " Oct 2 21:09:31.974733 kubelet[2490]: I1002 21:09:31.974629 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c2580e2e-ee32-476f-9366-e2ca40d51e3a-clustermesh-secrets\") pod \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " Oct 2 21:09:31.974733 kubelet[2490]: I1002 21:09:31.974650 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-qbv5x\" (UniqueName: \"kubernetes.io/projected/c2580e2e-ee32-476f-9366-e2ca40d51e3a-kube-api-access-qbv5x\") pod \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " Oct 2 21:09:31.974733 kubelet[2490]: I1002 21:09:31.974667 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-host-proc-sys-net\") pod \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " Oct 2 21:09:31.974733 kubelet[2490]: I1002 21:09:31.974686 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-bpf-maps\") pod \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " Oct 2 21:09:31.974733 kubelet[2490]: I1002 21:09:31.974727 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-xtables-lock\") pod \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " Oct 2 21:09:31.974914 kubelet[2490]: I1002 21:09:31.974760 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-config-path\") pod \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " Oct 2 21:09:31.974914 kubelet[2490]: I1002 21:09:31.974779 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c2580e2e-ee32-476f-9366-e2ca40d51e3a-hubble-tls\") pod \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " Oct 2 21:09:31.974914 kubelet[2490]: I1002 21:09:31.974805 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-cgroup\") pod \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " Oct 2 21:09:31.974914 kubelet[2490]: I1002 21:09:31.974826 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-lib-modules\") pod \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\" (UID: \"c2580e2e-ee32-476f-9366-e2ca40d51e3a\") " Oct 2 21:09:31.974914 kubelet[2490]: I1002 21:09:31.974894 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "c2580e2e-ee32-476f-9366-e2ca40d51e3a" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:31.975026 kubelet[2490]: I1002 21:09:31.974929 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "c2580e2e-ee32-476f-9366-e2ca40d51e3a" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:31.975026 kubelet[2490]: I1002 21:09:31.974945 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "c2580e2e-ee32-476f-9366-e2ca40d51e3a" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:31.975026 kubelet[2490]: I1002 21:09:31.974970 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "c2580e2e-ee32-476f-9366-e2ca40d51e3a" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:31.975026 kubelet[2490]: I1002 21:09:31.974984 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cni-path" (OuterVolumeSpecName: "cni-path") pod "c2580e2e-ee32-476f-9366-e2ca40d51e3a" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:31.975026 kubelet[2490]: I1002 21:09:31.974997 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-hostproc" (OuterVolumeSpecName: "hostproc") pod "c2580e2e-ee32-476f-9366-e2ca40d51e3a" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:31.977474 kubelet[2490]: I1002 21:09:31.975210 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "c2580e2e-ee32-476f-9366-e2ca40d51e3a" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:31.977474 kubelet[2490]: I1002 21:09:31.975400 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "c2580e2e-ee32-476f-9366-e2ca40d51e3a" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:31.977474 kubelet[2490]: I1002 21:09:31.975425 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "c2580e2e-ee32-476f-9366-e2ca40d51e3a" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:31.977474 kubelet[2490]: I1002 21:09:31.975653 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "c2580e2e-ee32-476f-9366-e2ca40d51e3a" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:09:31.977474 kubelet[2490]: I1002 21:09:31.977435 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "c2580e2e-ee32-476f-9366-e2ca40d51e3a" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 21:09:31.984106 kubelet[2490]: I1002 21:09:31.984038 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c2580e2e-ee32-476f-9366-e2ca40d51e3a-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "c2580e2e-ee32-476f-9366-e2ca40d51e3a" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:09:31.984198 kubelet[2490]: I1002 21:09:31.984166 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/c2580e2e-ee32-476f-9366-e2ca40d51e3a-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "c2580e2e-ee32-476f-9366-e2ca40d51e3a" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 21:09:31.986174 kubelet[2490]: I1002 21:09:31.986151 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c2580e2e-ee32-476f-9366-e2ca40d51e3a-kube-api-access-qbv5x" (OuterVolumeSpecName: "kube-api-access-qbv5x") pod "c2580e2e-ee32-476f-9366-e2ca40d51e3a" (UID: "c2580e2e-ee32-476f-9366-e2ca40d51e3a"). InnerVolumeSpecName "kube-api-access-qbv5x". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:09:32.005435 kubelet[2490]: I1002 21:09:32.005415 2490 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="8a010130-bc52-49c1-9a1a-47f0cc896bae" path="/var/lib/kubelet/pods/8a010130-bc52-49c1-9a1a-47f0cc896bae/volumes" Oct 2 21:09:32.009229 systemd[1]: Removed slice kubepods-burstable-podc2580e2e_ee32_476f_9366_e2ca40d51e3a.slice. Oct 2 21:09:32.075166 kubelet[2490]: I1002 21:09:32.075135 2490 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-cgroup\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:32.075341 kubelet[2490]: I1002 21:09:32.075330 2490 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-lib-modules\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:32.075402 kubelet[2490]: I1002 21:09:32.075394 2490 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-config-path\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:32.075462 kubelet[2490]: I1002 21:09:32.075454 2490 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c2580e2e-ee32-476f-9366-e2ca40d51e3a-hubble-tls\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:32.075519 kubelet[2490]: I1002 21:09:32.075511 2490 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:32.075576 kubelet[2490]: I1002 21:09:32.075568 2490 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cilium-run\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:32.075641 kubelet[2490]: I1002 21:09:32.075633 2490 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-etc-cni-netd\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:32.075701 kubelet[2490]: I1002 21:09:32.075693 2490 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c2580e2e-ee32-476f-9366-e2ca40d51e3a-clustermesh-secrets\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:32.075754 kubelet[2490]: I1002 21:09:32.075747 2490 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-qbv5x\" (UniqueName: \"kubernetes.io/projected/c2580e2e-ee32-476f-9366-e2ca40d51e3a-kube-api-access-qbv5x\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:32.075814 kubelet[2490]: I1002 21:09:32.075806 2490 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-host-proc-sys-net\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:32.075871 kubelet[2490]: I1002 21:09:32.075863 2490 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-cni-path\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:32.075931 kubelet[2490]: I1002 21:09:32.075923 2490 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-hostproc\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:32.075992 kubelet[2490]: I1002 21:09:32.075984 2490 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-bpf-maps\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:32.076052 kubelet[2490]: I1002 21:09:32.076044 2490 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c2580e2e-ee32-476f-9366-e2ca40d51e3a-xtables-lock\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:09:32.166983 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48-rootfs.mount: Deactivated successfully. Oct 2 21:09:32.167074 systemd[1]: var-lib-kubelet-pods-c2580e2e\x2dee32\x2d476f\x2d9366\x2de2ca40d51e3a-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 21:09:32.167148 systemd[1]: var-lib-kubelet-pods-c2580e2e\x2dee32\x2d476f\x2d9366\x2de2ca40d51e3a-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dqbv5x.mount: Deactivated successfully. Oct 2 21:09:32.167198 systemd[1]: var-lib-kubelet-pods-c2580e2e\x2dee32\x2d476f\x2d9366\x2de2ca40d51e3a-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 21:09:32.746269 kubelet[2490]: I1002 21:09:32.746244 2490 scope.go:117] "RemoveContainer" containerID="23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3" Oct 2 21:09:32.748885 env[1380]: time="2023-10-02T21:09:32.748839070Z" level=info msg="RemoveContainer for \"23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3\"" Oct 2 21:09:32.758699 env[1380]: time="2023-10-02T21:09:32.758661867Z" level=info msg="RemoveContainer for \"23d687bef519590b5739f89a23c13703655d4c6b6252ffa53359c71006151af3\" returns successfully" Oct 2 21:09:33.157520 sshd[3402]: pam_unix(sshd:session): session closed for user core Oct 2 21:09:33.157000 audit[3402]: USER_END pid=3402 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:33.161770 systemd-logind[1366]: Session 31 logged out. Waiting for processes to exit. Oct 2 21:09:33.163520 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 21:09:33.163616 kernel: audit: type=1106 audit(1696280973.157:1363): pid=3402 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:33.163101 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 21:09:33.163334 systemd[1]: session-31.scope: Consumed 1.844s CPU time. Oct 2 21:09:33.164435 systemd-logind[1366]: Removed session 31. Oct 2 21:09:33.165060 systemd[1]: sshd@28-10.200.20.10:22-10.200.12.6:36880.service: Deactivated successfully. Oct 2 21:09:33.157000 audit[3402]: CRED_DISP pid=3402 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:33.207753 kernel: audit: type=1104 audit(1696280973.157:1364): pid=3402 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:33.207873 kernel: audit: type=1131 audit(1696280973.162:1365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.10:22-10.200.12.6:36880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:33.162000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.10:22-10.200.12.6:36880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:33.230809 kubelet[2490]: E1002 21:09:33.230777 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:33.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.10:22-10.200.12.6:36882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:33.234694 systemd[1]: Started sshd@29-10.200.20.10:22-10.200.12.6:36882.service. Oct 2 21:09:33.256241 kernel: audit: type=1130 audit(1696280973.233:1366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.10:22-10.200.12.6:36882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:09:33.695000 audit[3508]: USER_ACCT pid=3508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:33.696644 sshd[3508]: Accepted publickey for core from 10.200.12.6 port 36882 ssh2: RSA SHA256:RbUAftNXPjYwfqIwucz3Hv3Z0w23ukbiktSz4ktt/to Oct 2 21:09:33.721155 kernel: audit: type=1101 audit(1696280973.695:1367): pid=3508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:33.719000 audit[3508]: CRED_ACQ pid=3508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:33.721402 sshd[3508]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:09:33.757987 kernel: audit: type=1103 audit(1696280973.719:1368): pid=3508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:33.758092 kernel: audit: type=1006 audit(1696280973.719:1369): pid=3508 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Oct 2 21:09:33.747424 systemd[1]: Started session-32.scope. Oct 2 21:09:33.748677 systemd-logind[1366]: New session 32 of user core. Oct 2 21:09:33.719000 audit[3508]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc69a5f00 a2=3 a3=1 items=0 ppid=1 pid=3508 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:33.719000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:09:33.790091 kernel: audit: type=1300 audit(1696280973.719:1369): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc69a5f00 a2=3 a3=1 items=0 ppid=1 pid=3508 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:33.790213 kernel: audit: type=1327 audit(1696280973.719:1369): proctitle=737368643A20636F7265205B707269765D Oct 2 21:09:33.758000 audit[3508]: USER_START pid=3508 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:33.814971 kernel: audit: type=1105 audit(1696280973.758:1370): pid=3508 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:33.761000 audit[3510]: CRED_ACQ pid=3510 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:09:34.004894 kubelet[2490]: I1002 21:09:34.004800 2490 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" path="/var/lib/kubelet/pods/c2580e2e-ee32-476f-9366-e2ca40d51e3a/volumes" Oct 2 21:09:34.633000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:34.633000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001019320 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:09:34.633000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:34.633000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:34.633000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001178bc0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:09:34.633000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:34.779000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:34.779000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4007daff20 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:09:34.779000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:09:34.779000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:34.779000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4007f76e10 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:09:34.779000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:09:34.784000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:34.784000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:34.784000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400803e090 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:09:34.784000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:09:34.784000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:34.784000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4007f565c0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:09:34.784000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:09:34.784000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4007f76e70 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:09:34.784000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:09:34.832000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:34.832000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4007f567a0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:09:34.832000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:09:35.152541 kubelet[2490]: I1002 21:09:35.152498 2490 topology_manager.go:215] "Topology Admit Handler" podUID="e3150c58-744f-4402-a138-c8464ac27a7f" podNamespace="kube-system" podName="cilium-nktpn" Oct 2 21:09:35.153076 kubelet[2490]: E1002 21:09:35.153049 2490 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" containerName="mount-cgroup" Oct 2 21:09:35.153184 kubelet[2490]: E1002 21:09:35.153174 2490 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" containerName="mount-cgroup" Oct 2 21:09:35.153284 kubelet[2490]: E1002 21:09:35.153274 2490 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="8a010130-bc52-49c1-9a1a-47f0cc896bae" containerName="cilium-operator" Oct 2 21:09:35.153362 kubelet[2490]: E1002 21:09:35.153353 2490 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" containerName="mount-cgroup" Oct 2 21:09:35.153429 kubelet[2490]: E1002 21:09:35.153411 2490 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" containerName="mount-cgroup" Oct 2 21:09:35.153526 kubelet[2490]: I1002 21:09:35.153517 2490 memory_manager.go:346] "RemoveStaleState removing state" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" containerName="mount-cgroup" Oct 2 21:09:35.153598 kubelet[2490]: I1002 21:09:35.153589 2490 memory_manager.go:346] "RemoveStaleState removing state" podUID="8a010130-bc52-49c1-9a1a-47f0cc896bae" containerName="cilium-operator" Oct 2 21:09:35.153660 kubelet[2490]: I1002 21:09:35.153646 2490 memory_manager.go:346] "RemoveStaleState removing state" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" containerName="mount-cgroup" Oct 2 21:09:35.153716 kubelet[2490]: I1002 21:09:35.153709 2490 memory_manager.go:346] "RemoveStaleState removing state" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" containerName="mount-cgroup" Oct 2 21:09:35.153770 kubelet[2490]: I1002 21:09:35.153762 2490 memory_manager.go:346] "RemoveStaleState removing state" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" containerName="mount-cgroup" Oct 2 21:09:35.153846 kubelet[2490]: E1002 21:09:35.153837 2490 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" containerName="mount-cgroup" Oct 2 21:09:35.153920 kubelet[2490]: E1002 21:09:35.153911 2490 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" containerName="mount-cgroup" Oct 2 21:09:35.153997 kubelet[2490]: I1002 21:09:35.153989 2490 memory_manager.go:346] "RemoveStaleState removing state" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" containerName="mount-cgroup" Oct 2 21:09:35.154070 kubelet[2490]: I1002 21:09:35.154061 2490 memory_manager.go:346] "RemoveStaleState removing state" podUID="c2580e2e-ee32-476f-9366-e2ca40d51e3a" containerName="mount-cgroup" Oct 2 21:09:35.159210 systemd[1]: Created slice kubepods-burstable-pode3150c58_744f_4402_a138_c8464ac27a7f.slice. Oct 2 21:09:35.292982 kubelet[2490]: I1002 21:09:35.292952 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-run\") pod \"cilium-nktpn\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " pod="kube-system/cilium-nktpn" Oct 2 21:09:35.293218 kubelet[2490]: I1002 21:09:35.293205 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-config-path\") pod \"cilium-nktpn\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " pod="kube-system/cilium-nktpn" Oct 2 21:09:35.293381 kubelet[2490]: I1002 21:09:35.293370 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e3150c58-744f-4402-a138-c8464ac27a7f-hubble-tls\") pod \"cilium-nktpn\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " pod="kube-system/cilium-nktpn" Oct 2 21:09:35.293488 kubelet[2490]: I1002 21:09:35.293478 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-xtables-lock\") pod \"cilium-nktpn\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " pod="kube-system/cilium-nktpn" Oct 2 21:09:35.293586 kubelet[2490]: I1002 21:09:35.293576 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-host-proc-sys-net\") pod \"cilium-nktpn\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " pod="kube-system/cilium-nktpn" Oct 2 21:09:35.293686 kubelet[2490]: I1002 21:09:35.293675 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-hostproc\") pod \"cilium-nktpn\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " pod="kube-system/cilium-nktpn" Oct 2 21:09:35.293784 kubelet[2490]: I1002 21:09:35.293775 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-cni-path\") pod \"cilium-nktpn\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " pod="kube-system/cilium-nktpn" Oct 2 21:09:35.293875 kubelet[2490]: I1002 21:09:35.293863 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-bpf-maps\") pod \"cilium-nktpn\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " pod="kube-system/cilium-nktpn" Oct 2 21:09:35.293968 kubelet[2490]: I1002 21:09:35.293958 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-lib-modules\") pod \"cilium-nktpn\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " pod="kube-system/cilium-nktpn" Oct 2 21:09:35.294071 kubelet[2490]: I1002 21:09:35.294061 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-host-proc-sys-kernel\") pod \"cilium-nktpn\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " pod="kube-system/cilium-nktpn" Oct 2 21:09:35.294178 kubelet[2490]: I1002 21:09:35.294168 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-cgroup\") pod \"cilium-nktpn\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " pod="kube-system/cilium-nktpn" Oct 2 21:09:35.294280 kubelet[2490]: I1002 21:09:35.294271 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e3150c58-744f-4402-a138-c8464ac27a7f-clustermesh-secrets\") pod \"cilium-nktpn\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " pod="kube-system/cilium-nktpn" Oct 2 21:09:35.294376 kubelet[2490]: I1002 21:09:35.294366 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-ipsec-secrets\") pod \"cilium-nktpn\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " pod="kube-system/cilium-nktpn" Oct 2 21:09:35.294471 kubelet[2490]: I1002 21:09:35.294461 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9w7l8\" (UniqueName: \"kubernetes.io/projected/e3150c58-744f-4402-a138-c8464ac27a7f-kube-api-access-9w7l8\") pod \"cilium-nktpn\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " pod="kube-system/cilium-nktpn" Oct 2 21:09:35.294582 kubelet[2490]: I1002 21:09:35.294572 2490 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-etc-cni-netd\") pod \"cilium-nktpn\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " pod="kube-system/cilium-nktpn" Oct 2 21:09:35.463037 env[1380]: time="2023-10-02T21:09:35.462881225Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-nktpn,Uid:e3150c58-744f-4402-a138-c8464ac27a7f,Namespace:kube-system,Attempt:0,}" Oct 2 21:09:35.501055 env[1380]: time="2023-10-02T21:09:35.500983480Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:09:35.501055 env[1380]: time="2023-10-02T21:09:35.501022479Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:09:35.501267 env[1380]: time="2023-10-02T21:09:35.501032599Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:09:35.501453 env[1380]: time="2023-10-02T21:09:35.501416631Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547 pid=3529 runtime=io.containerd.runc.v2 Oct 2 21:09:35.514578 systemd[1]: Started cri-containerd-7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547.scope. Oct 2 21:09:35.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.531000 audit: BPF prog-id=132 op=LOAD Oct 2 21:09:35.532000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.532000 audit[3539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3529 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:35.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764643932663731653666656466623230663532393733616132316233 Oct 2 21:09:35.532000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.532000 audit[3539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3529 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:35.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764643932663731653666656466623230663532393733616132316233 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit: BPF prog-id=133 op=LOAD Oct 2 21:09:35.533000 audit[3539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3529 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:35.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764643932663731653666656466623230663532393733616132316233 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.533000 audit: BPF prog-id=134 op=LOAD Oct 2 21:09:35.533000 audit[3539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3529 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:35.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764643932663731653666656466623230663532393733616132316233 Oct 2 21:09:35.534000 audit: BPF prog-id=134 op=UNLOAD Oct 2 21:09:35.534000 audit: BPF prog-id=133 op=UNLOAD Oct 2 21:09:35.534000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.534000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.534000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.534000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.534000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.534000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.534000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.534000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.534000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.534000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:09:35.534000 audit: BPF prog-id=135 op=LOAD Oct 2 21:09:35.534000 audit[3539]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3529 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:09:35.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764643932663731653666656466623230663532393733616132316233 Oct 2 21:09:35.549443 env[1380]: time="2023-10-02T21:09:35.549405243Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-nktpn,Uid:e3150c58-744f-4402-a138-c8464ac27a7f,Namespace:kube-system,Attempt:0,} returns sandbox id \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\"" Oct 2 21:09:35.554067 env[1380]: time="2023-10-02T21:09:35.554021948Z" level=info msg="CreateContainer within sandbox \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 21:09:35.586347 env[1380]: time="2023-10-02T21:09:35.586301803Z" level=info msg="CreateContainer within sandbox \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8\"" Oct 2 21:09:35.588433 env[1380]: time="2023-10-02T21:09:35.586945710Z" level=info msg="StartContainer for \"abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8\"" Oct 2 21:09:35.606198 systemd[1]: Started cri-containerd-abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8.scope. Oct 2 21:09:35.628074 systemd[1]: cri-containerd-abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8.scope: Deactivated successfully. Oct 2 21:09:35.705819 env[1380]: time="2023-10-02T21:09:35.705769583Z" level=info msg="shim disconnected" id=abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8 Oct 2 21:09:35.706182 env[1380]: time="2023-10-02T21:09:35.706163295Z" level=warning msg="cleaning up after shim disconnected" id=abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8 namespace=k8s.io Oct 2 21:09:35.706276 env[1380]: time="2023-10-02T21:09:35.706262613Z" level=info msg="cleaning up dead shim" Oct 2 21:09:35.719212 env[1380]: time="2023-10-02T21:09:35.717969292Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:09:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3588 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:09:35Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:09:35.719558 env[1380]: time="2023-10-02T21:09:35.719508900Z" level=error msg="copy shim log" error="read /proc/self/fd/38: file already closed" Oct 2 21:09:35.722230 env[1380]: time="2023-10-02T21:09:35.722187605Z" level=error msg="Failed to pipe stdout of container \"abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8\"" error="reading from a closed fifo" Oct 2 21:09:35.722339 env[1380]: time="2023-10-02T21:09:35.722308683Z" level=error msg="Failed to pipe stderr of container \"abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8\"" error="reading from a closed fifo" Oct 2 21:09:35.727263 env[1380]: time="2023-10-02T21:09:35.727219101Z" level=error msg="StartContainer for \"abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:09:35.727852 kubelet[2490]: E1002 21:09:35.727517 2490 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8" Oct 2 21:09:35.727852 kubelet[2490]: E1002 21:09:35.727614 2490 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:09:35.727852 kubelet[2490]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:09:35.727852 kubelet[2490]: rm /hostbin/cilium-mount Oct 2 21:09:35.727852 kubelet[2490]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9w7l8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-nktpn_kube-system(e3150c58-744f-4402-a138-c8464ac27a7f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:09:35.727852 kubelet[2490]: E1002 21:09:35.727650 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-nktpn" podUID="e3150c58-744f-4402-a138-c8464ac27a7f" Oct 2 21:09:35.767031 env[1380]: time="2023-10-02T21:09:35.766699408Z" level=info msg="CreateContainer within sandbox \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 21:09:35.797557 env[1380]: time="2023-10-02T21:09:35.797514654Z" level=info msg="CreateContainer within sandbox \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103\"" Oct 2 21:09:35.798483 env[1380]: time="2023-10-02T21:09:35.798450075Z" level=info msg="StartContainer for \"4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103\"" Oct 2 21:09:35.817548 systemd[1]: Started cri-containerd-4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103.scope. Oct 2 21:09:35.832921 systemd[1]: cri-containerd-4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103.scope: Deactivated successfully. Oct 2 21:09:35.849953 env[1380]: time="2023-10-02T21:09:35.849895575Z" level=info msg="shim disconnected" id=4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103 Oct 2 21:09:35.849953 env[1380]: time="2023-10-02T21:09:35.849952334Z" level=warning msg="cleaning up after shim disconnected" id=4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103 namespace=k8s.io Oct 2 21:09:35.850195 env[1380]: time="2023-10-02T21:09:35.849962614Z" level=info msg="cleaning up dead shim" Oct 2 21:09:35.864510 env[1380]: time="2023-10-02T21:09:35.864455315Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:09:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3626 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:09:35Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:09:35.865031 env[1380]: time="2023-10-02T21:09:35.864957105Z" level=error msg="copy shim log" error="read /proc/self/fd/38: file already closed" Oct 2 21:09:35.865230 env[1380]: time="2023-10-02T21:09:35.865189100Z" level=error msg="Failed to pipe stdout of container \"4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103\"" error="reading from a closed fifo" Oct 2 21:09:35.865396 env[1380]: time="2023-10-02T21:09:35.865348577Z" level=error msg="Failed to pipe stderr of container \"4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103\"" error="reading from a closed fifo" Oct 2 21:09:35.869875 env[1380]: time="2023-10-02T21:09:35.869821645Z" level=error msg="StartContainer for \"4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:09:35.870249 kubelet[2490]: E1002 21:09:35.870218 2490 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103" Oct 2 21:09:35.870389 kubelet[2490]: E1002 21:09:35.870324 2490 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:09:35.870389 kubelet[2490]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:09:35.870389 kubelet[2490]: rm /hostbin/cilium-mount Oct 2 21:09:35.870389 kubelet[2490]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9w7l8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-nktpn_kube-system(e3150c58-744f-4402-a138-c8464ac27a7f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:09:35.870389 kubelet[2490]: E1002 21:09:35.870363 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-nktpn" podUID="e3150c58-744f-4402-a138-c8464ac27a7f" Oct 2 21:09:36.763864 kubelet[2490]: I1002 21:09:36.763833 2490 scope.go:117] "RemoveContainer" containerID="abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8" Oct 2 21:09:36.764273 kubelet[2490]: I1002 21:09:36.764246 2490 scope.go:117] "RemoveContainer" containerID="abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8" Oct 2 21:09:36.766218 env[1380]: time="2023-10-02T21:09:36.765770186Z" level=info msg="RemoveContainer for \"abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8\"" Oct 2 21:09:36.766753 env[1380]: time="2023-10-02T21:09:36.766604569Z" level=info msg="RemoveContainer for \"abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8\"" Oct 2 21:09:36.766846 env[1380]: time="2023-10-02T21:09:36.766811925Z" level=error msg="RemoveContainer for \"abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8\" failed" error="failed to set removing state for container \"abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8\": container is already in removing state" Oct 2 21:09:36.767625 kubelet[2490]: E1002 21:09:36.767021 2490 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8\": container is already in removing state" containerID="abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8" Oct 2 21:09:36.767625 kubelet[2490]: E1002 21:09:36.767056 2490 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8": container is already in removing state; Skipping pod "cilium-nktpn_kube-system(e3150c58-744f-4402-a138-c8464ac27a7f)" Oct 2 21:09:36.767625 kubelet[2490]: E1002 21:09:36.767398 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-nktpn_kube-system(e3150c58-744f-4402-a138-c8464ac27a7f)\"" pod="kube-system/cilium-nktpn" podUID="e3150c58-744f-4402-a138-c8464ac27a7f" Oct 2 21:09:36.780447 env[1380]: time="2023-10-02T21:09:36.780414645Z" level=info msg="RemoveContainer for \"abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8\" returns successfully" Oct 2 21:09:38.064010 env[1380]: time="2023-10-02T21:09:38.063968551Z" level=info msg="StopPodSandbox for \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\"" Oct 2 21:09:38.064365 env[1380]: time="2023-10-02T21:09:38.064055629Z" level=info msg="TearDown network for sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" successfully" Oct 2 21:09:38.064365 env[1380]: time="2023-10-02T21:09:38.064087789Z" level=info msg="StopPodSandbox for \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" returns successfully" Oct 2 21:09:38.064809 env[1380]: time="2023-10-02T21:09:38.064772855Z" level=info msg="RemovePodSandbox for \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\"" Oct 2 21:09:38.064941 env[1380]: time="2023-10-02T21:09:38.064908172Z" level=info msg="Forcibly stopping sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\"" Oct 2 21:09:38.065058 env[1380]: time="2023-10-02T21:09:38.065039809Z" level=info msg="TearDown network for sandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" successfully" Oct 2 21:09:38.073867 env[1380]: time="2023-10-02T21:09:38.073834389Z" level=info msg="RemovePodSandbox \"227638f65ba96de566599f62f20519f5c88f5b4674b9fb2fe862e45180efde48\" returns successfully" Oct 2 21:09:38.074412 env[1380]: time="2023-10-02T21:09:38.074378378Z" level=info msg="StopPodSandbox for \"eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295\"" Oct 2 21:09:38.074488 env[1380]: time="2023-10-02T21:09:38.074460216Z" level=info msg="TearDown network for sandbox \"eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295\" successfully" Oct 2 21:09:38.074528 env[1380]: time="2023-10-02T21:09:38.074489416Z" level=info msg="StopPodSandbox for \"eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295\" returns successfully" Oct 2 21:09:38.074882 env[1380]: time="2023-10-02T21:09:38.074856088Z" level=info msg="RemovePodSandbox for \"eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295\"" Oct 2 21:09:38.074947 env[1380]: time="2023-10-02T21:09:38.074886368Z" level=info msg="Forcibly stopping sandbox \"eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295\"" Oct 2 21:09:38.074974 env[1380]: time="2023-10-02T21:09:38.074944526Z" level=info msg="TearDown network for sandbox \"eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295\" successfully" Oct 2 21:09:38.084645 env[1380]: time="2023-10-02T21:09:38.084603889Z" level=info msg="RemovePodSandbox \"eb7a89442c9e2c5fa2230c41c7a65d8de1a2b4d6f502fe0b0bff397171ed5295\" returns successfully" Oct 2 21:09:38.232435 kubelet[2490]: E1002 21:09:38.232394 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:38.810382 kubelet[2490]: W1002 21:09:38.810348 2490 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode3150c58_744f_4402_a138_c8464ac27a7f.slice/cri-containerd-abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8.scope WatchSource:0}: container "abc48b7910e0c0c15e7ba0e96387a360de0f096fa53df39f15a09e6442f694f8" in namespace "k8s.io": not found Oct 2 21:09:41.920295 kubelet[2490]: W1002 21:09:41.920255 2490 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode3150c58_744f_4402_a138_c8464ac27a7f.slice/cri-containerd-4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103.scope WatchSource:0}: task 4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103 not found: not found Oct 2 21:09:43.233371 kubelet[2490]: E1002 21:09:43.233340 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:48.234709 kubelet[2490]: E1002 21:09:48.234669 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:49.005300 env[1380]: time="2023-10-02T21:09:49.004990925Z" level=info msg="CreateContainer within sandbox \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 21:09:49.028630 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1376008730.mount: Deactivated successfully. Oct 2 21:09:49.041504 env[1380]: time="2023-10-02T21:09:49.041384234Z" level=info msg="CreateContainer within sandbox \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7\"" Oct 2 21:09:49.042584 env[1380]: time="2023-10-02T21:09:49.041877384Z" level=info msg="StartContainer for \"1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7\"" Oct 2 21:09:49.064976 systemd[1]: Started cri-containerd-1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7.scope. Oct 2 21:09:49.076541 systemd[1]: cri-containerd-1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7.scope: Deactivated successfully. Oct 2 21:09:49.109520 env[1380]: time="2023-10-02T21:09:49.109476107Z" level=info msg="shim disconnected" id=1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7 Oct 2 21:09:49.109800 env[1380]: time="2023-10-02T21:09:49.109772621Z" level=warning msg="cleaning up after shim disconnected" id=1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7 namespace=k8s.io Oct 2 21:09:49.109879 env[1380]: time="2023-10-02T21:09:49.109867019Z" level=info msg="cleaning up dead shim" Oct 2 21:09:49.121608 env[1380]: time="2023-10-02T21:09:49.121570184Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:09:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3666 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:09:49Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:09:49.121989 env[1380]: time="2023-10-02T21:09:49.121938897Z" level=error msg="copy shim log" error="read /proc/self/fd/38: file already closed" Oct 2 21:09:49.124078 env[1380]: time="2023-10-02T21:09:49.122198292Z" level=error msg="Failed to pipe stdout of container \"1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7\"" error="reading from a closed fifo" Oct 2 21:09:49.124186 env[1380]: time="2023-10-02T21:09:49.124034535Z" level=error msg="Failed to pipe stderr of container \"1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7\"" error="reading from a closed fifo" Oct 2 21:09:49.128921 env[1380]: time="2023-10-02T21:09:49.128883478Z" level=error msg="StartContainer for \"1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:09:49.129757 kubelet[2490]: E1002 21:09:49.129248 2490 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7" Oct 2 21:09:49.129757 kubelet[2490]: E1002 21:09:49.129728 2490 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:09:49.129757 kubelet[2490]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:09:49.129757 kubelet[2490]: rm /hostbin/cilium-mount Oct 2 21:09:49.129757 kubelet[2490]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9w7l8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-nktpn_kube-system(e3150c58-744f-4402-a138-c8464ac27a7f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:09:49.130229 kubelet[2490]: E1002 21:09:49.130198 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-nktpn" podUID="e3150c58-744f-4402-a138-c8464ac27a7f" Oct 2 21:09:49.295000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:49.301666 kernel: kauditd_printk_skb: 82 callbacks suppressed Oct 2 21:09:49.301791 kernel: audit: type=1400 audit(1696280989.295:1398): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:49.295000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025cab60 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:09:49.350783 kernel: audit: type=1300 audit(1696280989.295:1398): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025cab60 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:09:49.351142 kernel: audit: type=1327 audit(1696280989.295:1398): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:49.295000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:49.296000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:49.395438 kernel: audit: type=1400 audit(1696280989.296:1399): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:49.395554 kernel: audit: type=1300 audit(1696280989.296:1399): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400200a140 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:09:49.296000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400200a140 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:09:49.296000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:49.446077 kernel: audit: type=1327 audit(1696280989.296:1399): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:49.297000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:49.467186 kernel: audit: type=1400 audit(1696280989.297:1400): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:49.467285 kernel: audit: type=1300 audit(1696280989.297:1400): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025cac80 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:09:49.297000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025cac80 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:09:49.297000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:49.517933 kernel: audit: type=1327 audit(1696280989.297:1400): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:49.518024 kernel: audit: type=1400 audit(1696280989.309:1401): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:49.309000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:09:49.309000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025caea0 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:09:49.309000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:09:49.784446 kubelet[2490]: I1002 21:09:49.784422 2490 scope.go:117] "RemoveContainer" containerID="4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103" Oct 2 21:09:49.784885 kubelet[2490]: I1002 21:09:49.784861 2490 scope.go:117] "RemoveContainer" containerID="4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103" Oct 2 21:09:49.786611 env[1380]: time="2023-10-02T21:09:49.786577793Z" level=info msg="RemoveContainer for \"4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103\"" Oct 2 21:09:49.787017 env[1380]: time="2023-10-02T21:09:49.786994025Z" level=info msg="RemoveContainer for \"4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103\"" Oct 2 21:09:49.787419 env[1380]: time="2023-10-02T21:09:49.787386337Z" level=error msg="RemoveContainer for \"4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103\" failed" error="failed to set removing state for container \"4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103\": container is already in removing state" Oct 2 21:09:49.787799 kubelet[2490]: E1002 21:09:49.787783 2490 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103\": container is already in removing state" containerID="4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103" Oct 2 21:09:49.787908 kubelet[2490]: E1002 21:09:49.787896 2490 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103": container is already in removing state; Skipping pod "cilium-nktpn_kube-system(e3150c58-744f-4402-a138-c8464ac27a7f)" Oct 2 21:09:49.788251 kubelet[2490]: E1002 21:09:49.788236 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-nktpn_kube-system(e3150c58-744f-4402-a138-c8464ac27a7f)\"" pod="kube-system/cilium-nktpn" podUID="e3150c58-744f-4402-a138-c8464ac27a7f" Oct 2 21:09:49.798923 env[1380]: time="2023-10-02T21:09:49.798886426Z" level=info msg="RemoveContainer for \"4c95e295216eed15055f45050d879e511a4a94ab2c488131896d7a4971a3c103\" returns successfully" Oct 2 21:09:50.025743 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7-rootfs.mount: Deactivated successfully. Oct 2 21:09:52.214389 kubelet[2490]: W1002 21:09:52.214345 2490 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode3150c58_744f_4402_a138_c8464ac27a7f.slice/cri-containerd-1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7.scope WatchSource:0}: task 1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7 not found: not found Oct 2 21:09:53.236400 kubelet[2490]: E1002 21:09:53.236375 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:09:58.237966 kubelet[2490]: E1002 21:09:58.237932 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:00.002744 kubelet[2490]: E1002 21:10:00.002711 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-nktpn_kube-system(e3150c58-744f-4402-a138-c8464ac27a7f)\"" pod="kube-system/cilium-nktpn" podUID="e3150c58-744f-4402-a138-c8464ac27a7f" Oct 2 21:10:03.238883 kubelet[2490]: E1002 21:10:03.238850 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:08.239916 kubelet[2490]: E1002 21:10:08.239876 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:12.005996 env[1380]: time="2023-10-02T21:10:12.005940528Z" level=info msg="CreateContainer within sandbox \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 21:10:12.029710 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount861832784.mount: Deactivated successfully. Oct 2 21:10:12.032794 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1652182398.mount: Deactivated successfully. Oct 2 21:10:12.047197 env[1380]: time="2023-10-02T21:10:12.047148447Z" level=info msg="CreateContainer within sandbox \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0\"" Oct 2 21:10:12.050103 env[1380]: time="2023-10-02T21:10:12.047667797Z" level=info msg="StartContainer for \"dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0\"" Oct 2 21:10:12.073204 systemd[1]: Started cri-containerd-dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0.scope. Oct 2 21:10:12.097253 systemd[1]: cri-containerd-dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0.scope: Deactivated successfully. Oct 2 21:10:12.121507 env[1380]: time="2023-10-02T21:10:12.121459122Z" level=info msg="shim disconnected" id=dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0 Oct 2 21:10:12.121738 env[1380]: time="2023-10-02T21:10:12.121720837Z" level=warning msg="cleaning up after shim disconnected" id=dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0 namespace=k8s.io Oct 2 21:10:12.121797 env[1380]: time="2023-10-02T21:10:12.121784876Z" level=info msg="cleaning up dead shim" Oct 2 21:10:12.134853 env[1380]: time="2023-10-02T21:10:12.134804943Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:10:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3705 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:10:12Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:10:12Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:10:12.135328 env[1380]: time="2023-10-02T21:10:12.135277134Z" level=error msg="copy shim log" error="read /proc/self/fd/38: file already closed" Oct 2 21:10:12.140209 env[1380]: time="2023-10-02T21:10:12.135520849Z" level=error msg="Failed to pipe stdout of container \"dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0\"" error="reading from a closed fifo" Oct 2 21:10:12.140324 env[1380]: time="2023-10-02T21:10:12.140150919Z" level=error msg="Failed to pipe stderr of container \"dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0\"" error="reading from a closed fifo" Oct 2 21:10:12.144565 env[1380]: time="2023-10-02T21:10:12.144520194Z" level=error msg="StartContainer for \"dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:10:12.144916 kubelet[2490]: E1002 21:10:12.144746 2490 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0" Oct 2 21:10:12.144916 kubelet[2490]: E1002 21:10:12.144856 2490 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:10:12.144916 kubelet[2490]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:10:12.144916 kubelet[2490]: rm /hostbin/cilium-mount Oct 2 21:10:12.144916 kubelet[2490]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9w7l8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-nktpn_kube-system(e3150c58-744f-4402-a138-c8464ac27a7f): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:10:12.144916 kubelet[2490]: E1002 21:10:12.144893 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-nktpn" podUID="e3150c58-744f-4402-a138-c8464ac27a7f" Oct 2 21:10:12.822559 kubelet[2490]: I1002 21:10:12.822528 2490 scope.go:117] "RemoveContainer" containerID="1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7" Oct 2 21:10:12.822978 kubelet[2490]: I1002 21:10:12.822955 2490 scope.go:117] "RemoveContainer" containerID="1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7" Oct 2 21:10:12.826405 env[1380]: time="2023-10-02T21:10:12.826358778Z" level=info msg="RemoveContainer for \"1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7\"" Oct 2 21:10:12.828214 env[1380]: time="2023-10-02T21:10:12.828172623Z" level=info msg="RemoveContainer for \"1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7\"" Oct 2 21:10:12.828303 env[1380]: time="2023-10-02T21:10:12.828257101Z" level=error msg="RemoveContainer for \"1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7\" failed" error="failed to set removing state for container \"1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7\": container is already in removing state" Oct 2 21:10:12.833337 kubelet[2490]: E1002 21:10:12.832833 2490 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7\": container is already in removing state" containerID="1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7" Oct 2 21:10:12.833337 kubelet[2490]: E1002 21:10:12.832890 2490 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7": container is already in removing state; Skipping pod "cilium-nktpn_kube-system(e3150c58-744f-4402-a138-c8464ac27a7f)" Oct 2 21:10:12.833337 kubelet[2490]: E1002 21:10:12.833270 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-nktpn_kube-system(e3150c58-744f-4402-a138-c8464ac27a7f)\"" pod="kube-system/cilium-nktpn" podUID="e3150c58-744f-4402-a138-c8464ac27a7f" Oct 2 21:10:12.838379 env[1380]: time="2023-10-02T21:10:12.836021710Z" level=info msg="RemoveContainer for \"1566e96b630eb00660e8e87e82216e0c67cfcb8db740e084b1248b6380eebfe7\" returns successfully" Oct 2 21:10:13.027236 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0-rootfs.mount: Deactivated successfully. Oct 2 21:10:13.240529 kubelet[2490]: E1002 21:10:13.240506 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:15.229220 kubelet[2490]: W1002 21:10:15.229184 2490 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode3150c58_744f_4402_a138_c8464ac27a7f.slice/cri-containerd-dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0.scope WatchSource:0}: task dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0 not found: not found Oct 2 21:10:18.242419 kubelet[2490]: E1002 21:10:18.242394 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:23.243979 kubelet[2490]: E1002 21:10:23.243945 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:26.004943 kubelet[2490]: E1002 21:10:26.004910 2490 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-nktpn_kube-system(e3150c58-744f-4402-a138-c8464ac27a7f)\"" pod="kube-system/cilium-nktpn" podUID="e3150c58-744f-4402-a138-c8464ac27a7f" Oct 2 21:10:28.244685 kubelet[2490]: E1002 21:10:28.244661 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:33.245942 kubelet[2490]: E1002 21:10:33.245916 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:34.634000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:34.641314 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:10:34.641469 kernel: audit: type=1400 audit(1696281034.634:1403): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:34.634000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:34.683435 kernel: audit: type=1400 audit(1696281034.634:1402): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:34.683511 kernel: audit: type=1300 audit(1696281034.634:1402): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000195320 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:10:34.634000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000195320 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:10:34.634000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:34.733569 kernel: audit: type=1327 audit(1696281034.634:1402): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:34.733669 kernel: audit: type=1300 audit(1696281034.634:1403): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000cea990 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:10:34.634000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000cea990 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:10:34.634000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:34.783838 kernel: audit: type=1327 audit(1696281034.634:1403): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:34.780000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:34.805804 kernel: audit: type=1400 audit(1696281034.780:1404): avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:34.805963 kernel: audit: type=1300 audit(1696281034.780:1404): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400f9f65d0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:10:34.780000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400f9f65d0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:10:34.780000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:10:34.854732 kernel: audit: type=1327 audit(1696281034.780:1404): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:10:34.782000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:34.875902 kernel: audit: type=1400 audit(1696281034.782:1405): avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:34.782000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400fb3e2a0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:10:34.782000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:10:34.784000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:34.784000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400fa16840 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:10:34.784000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:10:34.784000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:34.784000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400f9f6690 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:10:34.784000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:10:34.785000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:34.785000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400f9f66c0 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:10:34.785000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:10:34.832000 audit[2322]: AVC avc: denied { watch } for pid=2322 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:34.832000 audit[2322]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400fa16940 a2=fc6 a3=0 items=0 ppid=2186 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c53,c760 key=(null) Oct 2 21:10:34.832000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3130002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:10:36.370549 env[1380]: time="2023-10-02T21:10:36.370504662Z" level=info msg="StopPodSandbox for \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\"" Oct 2 21:10:36.370895 env[1380]: time="2023-10-02T21:10:36.370568141Z" level=info msg="Container to stop \"dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:10:36.372007 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547-shm.mount: Deactivated successfully. Oct 2 21:10:36.386346 systemd[1]: cri-containerd-7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547.scope: Deactivated successfully. Oct 2 21:10:36.385000 audit: BPF prog-id=132 op=UNLOAD Oct 2 21:10:36.390000 audit: BPF prog-id=135 op=UNLOAD Oct 2 21:10:36.408935 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547-rootfs.mount: Deactivated successfully. Oct 2 21:10:36.457720 env[1380]: time="2023-10-02T21:10:36.457676887Z" level=info msg="shim disconnected" id=7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547 Oct 2 21:10:36.458484 env[1380]: time="2023-10-02T21:10:36.458461352Z" level=warning msg="cleaning up after shim disconnected" id=7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547 namespace=k8s.io Oct 2 21:10:36.458608 env[1380]: time="2023-10-02T21:10:36.458594750Z" level=info msg="cleaning up dead shim" Oct 2 21:10:36.478567 env[1380]: time="2023-10-02T21:10:36.478527971Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:10:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3739 runtime=io.containerd.runc.v2\n" Oct 2 21:10:36.479005 env[1380]: time="2023-10-02T21:10:36.478979563Z" level=info msg="TearDown network for sandbox \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\" successfully" Oct 2 21:10:36.479094 env[1380]: time="2023-10-02T21:10:36.479078161Z" level=info msg="StopPodSandbox for \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\" returns successfully" Oct 2 21:10:36.545355 sshd[3508]: pam_unix(sshd:session): session closed for user core Oct 2 21:10:36.545000 audit[3508]: USER_END pid=3508 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:10:36.545000 audit[3508]: CRED_DISP pid=3508 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:10:36.548445 systemd[1]: sshd@29-10.200.20.10:22-10.200.12.6:36882.service: Deactivated successfully. Oct 2 21:10:36.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.10:22-10.200.12.6:36882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:10:36.549146 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 21:10:36.549327 systemd[1]: session-32.scope: Consumed 1.445s CPU time. Oct 2 21:10:36.549786 systemd-logind[1366]: Session 32 logged out. Waiting for processes to exit. Oct 2 21:10:36.550804 systemd-logind[1366]: Removed session 32. Oct 2 21:10:36.620406 kubelet[2490]: I1002 21:10:36.620380 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-config-path\") pod \"e3150c58-744f-4402-a138-c8464ac27a7f\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " Oct 2 21:10:36.621314 kubelet[2490]: I1002 21:10:36.621243 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-cni-path\") pod \"e3150c58-744f-4402-a138-c8464ac27a7f\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " Oct 2 21:10:36.621314 kubelet[2490]: I1002 21:10:36.621285 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-hostproc\") pod \"e3150c58-744f-4402-a138-c8464ac27a7f\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " Oct 2 21:10:36.621314 kubelet[2490]: I1002 21:10:36.621318 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-lib-modules\") pod \"e3150c58-744f-4402-a138-c8464ac27a7f\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " Oct 2 21:10:36.621443 kubelet[2490]: I1002 21:10:36.621343 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e3150c58-744f-4402-a138-c8464ac27a7f-clustermesh-secrets\") pod \"e3150c58-744f-4402-a138-c8464ac27a7f\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " Oct 2 21:10:36.621443 kubelet[2490]: I1002 21:10:36.621361 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-run\") pod \"e3150c58-744f-4402-a138-c8464ac27a7f\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " Oct 2 21:10:36.621443 kubelet[2490]: I1002 21:10:36.621381 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e3150c58-744f-4402-a138-c8464ac27a7f-hubble-tls\") pod \"e3150c58-744f-4402-a138-c8464ac27a7f\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " Oct 2 21:10:36.621443 kubelet[2490]: I1002 21:10:36.621396 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-bpf-maps\") pod \"e3150c58-744f-4402-a138-c8464ac27a7f\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " Oct 2 21:10:36.621443 kubelet[2490]: I1002 21:10:36.621414 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-host-proc-sys-net\") pod \"e3150c58-744f-4402-a138-c8464ac27a7f\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " Oct 2 21:10:36.621443 kubelet[2490]: I1002 21:10:36.621437 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-9w7l8\" (UniqueName: \"kubernetes.io/projected/e3150c58-744f-4402-a138-c8464ac27a7f-kube-api-access-9w7l8\") pod \"e3150c58-744f-4402-a138-c8464ac27a7f\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " Oct 2 21:10:36.621581 kubelet[2490]: I1002 21:10:36.621453 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-host-proc-sys-kernel\") pod \"e3150c58-744f-4402-a138-c8464ac27a7f\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " Oct 2 21:10:36.621581 kubelet[2490]: I1002 21:10:36.621470 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-cgroup\") pod \"e3150c58-744f-4402-a138-c8464ac27a7f\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " Oct 2 21:10:36.621581 kubelet[2490]: I1002 21:10:36.621489 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-ipsec-secrets\") pod \"e3150c58-744f-4402-a138-c8464ac27a7f\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " Oct 2 21:10:36.621581 kubelet[2490]: I1002 21:10:36.621507 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-etc-cni-netd\") pod \"e3150c58-744f-4402-a138-c8464ac27a7f\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " Oct 2 21:10:36.621581 kubelet[2490]: I1002 21:10:36.621524 2490 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-xtables-lock\") pod \"e3150c58-744f-4402-a138-c8464ac27a7f\" (UID: \"e3150c58-744f-4402-a138-c8464ac27a7f\") " Oct 2 21:10:36.621581 kubelet[2490]: I1002 21:10:36.621569 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "e3150c58-744f-4402-a138-c8464ac27a7f" (UID: "e3150c58-744f-4402-a138-c8464ac27a7f"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:36.621718 kubelet[2490]: I1002 21:10:36.621591 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-cni-path" (OuterVolumeSpecName: "cni-path") pod "e3150c58-744f-4402-a138-c8464ac27a7f" (UID: "e3150c58-744f-4402-a138-c8464ac27a7f"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:36.621718 kubelet[2490]: I1002 21:10:36.621605 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-hostproc" (OuterVolumeSpecName: "hostproc") pod "e3150c58-744f-4402-a138-c8464ac27a7f" (UID: "e3150c58-744f-4402-a138-c8464ac27a7f"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:36.621718 kubelet[2490]: I1002 21:10:36.621619 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "e3150c58-744f-4402-a138-c8464ac27a7f" (UID: "e3150c58-744f-4402-a138-c8464ac27a7f"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:36.622187 kubelet[2490]: I1002 21:10:36.622162 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "e3150c58-744f-4402-a138-c8464ac27a7f" (UID: "e3150c58-744f-4402-a138-c8464ac27a7f"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:36.623663 kubelet[2490]: I1002 21:10:36.623629 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "e3150c58-744f-4402-a138-c8464ac27a7f" (UID: "e3150c58-744f-4402-a138-c8464ac27a7f"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 21:10:36.623822 kubelet[2490]: I1002 21:10:36.623804 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "e3150c58-744f-4402-a138-c8464ac27a7f" (UID: "e3150c58-744f-4402-a138-c8464ac27a7f"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:36.623923 kubelet[2490]: I1002 21:10:36.623910 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "e3150c58-744f-4402-a138-c8464ac27a7f" (UID: "e3150c58-744f-4402-a138-c8464ac27a7f"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:36.624012 kubelet[2490]: I1002 21:10:36.624000 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "e3150c58-744f-4402-a138-c8464ac27a7f" (UID: "e3150c58-744f-4402-a138-c8464ac27a7f"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:36.624506 kubelet[2490]: I1002 21:10:36.624486 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "e3150c58-744f-4402-a138-c8464ac27a7f" (UID: "e3150c58-744f-4402-a138-c8464ac27a7f"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:36.624632 kubelet[2490]: I1002 21:10:36.624619 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "e3150c58-744f-4402-a138-c8464ac27a7f" (UID: "e3150c58-744f-4402-a138-c8464ac27a7f"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:10:36.628844 systemd[1]: var-lib-kubelet-pods-e3150c58\x2d744f\x2d4402\x2da138\x2dc8464ac27a7f-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 21:10:36.630062 kubelet[2490]: I1002 21:10:36.630038 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/e3150c58-744f-4402-a138-c8464ac27a7f-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "e3150c58-744f-4402-a138-c8464ac27a7f" (UID: "e3150c58-744f-4402-a138-c8464ac27a7f"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 21:10:36.632579 systemd[1]: var-lib-kubelet-pods-e3150c58\x2d744f\x2d4402\x2da138\x2dc8464ac27a7f-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 21:10:36.633199 kubelet[2490]: I1002 21:10:36.633165 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e3150c58-744f-4402-a138-c8464ac27a7f-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "e3150c58-744f-4402-a138-c8464ac27a7f" (UID: "e3150c58-744f-4402-a138-c8464ac27a7f"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:10:36.637732 kubelet[2490]: I1002 21:10:36.636408 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "e3150c58-744f-4402-a138-c8464ac27a7f" (UID: "e3150c58-744f-4402-a138-c8464ac27a7f"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 21:10:36.637281 systemd[1]: var-lib-kubelet-pods-e3150c58\x2d744f\x2d4402\x2da138\x2dc8464ac27a7f-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 21:10:36.638293 kubelet[2490]: I1002 21:10:36.638261 2490 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e3150c58-744f-4402-a138-c8464ac27a7f-kube-api-access-9w7l8" (OuterVolumeSpecName: "kube-api-access-9w7l8") pod "e3150c58-744f-4402-a138-c8464ac27a7f" (UID: "e3150c58-744f-4402-a138-c8464ac27a7f"). InnerVolumeSpecName "kube-api-access-9w7l8". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:10:36.722567 kubelet[2490]: I1002 21:10:36.722532 2490 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:10:36.722567 kubelet[2490]: I1002 21:10:36.722565 2490 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-etc-cni-netd\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:10:36.722756 kubelet[2490]: I1002 21:10:36.722578 2490 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-xtables-lock\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:10:36.722756 kubelet[2490]: I1002 21:10:36.722590 2490 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-config-path\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:10:36.722756 kubelet[2490]: I1002 21:10:36.722600 2490 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-cni-path\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:10:36.722756 kubelet[2490]: I1002 21:10:36.722609 2490 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-hostproc\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:10:36.722756 kubelet[2490]: I1002 21:10:36.722619 2490 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-lib-modules\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:10:36.722756 kubelet[2490]: I1002 21:10:36.722632 2490 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-run\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:10:36.722756 kubelet[2490]: I1002 21:10:36.722641 2490 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e3150c58-744f-4402-a138-c8464ac27a7f-hubble-tls\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:10:36.722756 kubelet[2490]: I1002 21:10:36.722651 2490 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-bpf-maps\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:10:36.722756 kubelet[2490]: I1002 21:10:36.722660 2490 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e3150c58-744f-4402-a138-c8464ac27a7f-clustermesh-secrets\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:10:36.722756 kubelet[2490]: I1002 21:10:36.722670 2490 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-host-proc-sys-net\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:10:36.722756 kubelet[2490]: I1002 21:10:36.722683 2490 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-9w7l8\" (UniqueName: \"kubernetes.io/projected/e3150c58-744f-4402-a138-c8464ac27a7f-kube-api-access-9w7l8\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:10:36.722756 kubelet[2490]: I1002 21:10:36.722692 2490 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:10:36.722756 kubelet[2490]: I1002 21:10:36.722703 2490 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e3150c58-744f-4402-a138-c8464ac27a7f-cilium-cgroup\") on node \"ci-3510.3.0-a-4ade0e9e10\" DevicePath \"\"" Oct 2 21:10:36.864000 kubelet[2490]: I1002 21:10:36.863968 2490 scope.go:117] "RemoveContainer" containerID="dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0" Oct 2 21:10:36.866885 env[1380]: time="2023-10-02T21:10:36.866841800Z" level=info msg="RemoveContainer for \"dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0\"" Oct 2 21:10:36.871147 systemd[1]: Removed slice kubepods-burstable-pode3150c58_744f_4402_a138_c8464ac27a7f.slice. Oct 2 21:10:36.879938 env[1380]: time="2023-10-02T21:10:36.879850393Z" level=info msg="RemoveContainer for \"dba7e391e5f52a18bfdb664873bed3a567c2b6269c0cbc57f88e3a7bd82199b0\" returns successfully" Oct 2 21:10:37.372000 systemd[1]: var-lib-kubelet-pods-e3150c58\x2d744f\x2d4402\x2da138\x2dc8464ac27a7f-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d9w7l8.mount: Deactivated successfully. Oct 2 21:10:38.005198 kubelet[2490]: I1002 21:10:38.005174 2490 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="e3150c58-744f-4402-a138-c8464ac27a7f" path="/var/lib/kubelet/pods/e3150c58-744f-4402-a138-c8464ac27a7f/volumes" Oct 2 21:10:38.087151 env[1380]: time="2023-10-02T21:10:38.086955496Z" level=info msg="StopPodSandbox for \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\"" Oct 2 21:10:38.087151 env[1380]: time="2023-10-02T21:10:38.087036494Z" level=info msg="TearDown network for sandbox \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\" successfully" Oct 2 21:10:38.087151 env[1380]: time="2023-10-02T21:10:38.087067494Z" level=info msg="StopPodSandbox for \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\" returns successfully" Oct 2 21:10:38.088538 env[1380]: time="2023-10-02T21:10:38.087617803Z" level=info msg="RemovePodSandbox for \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\"" Oct 2 21:10:38.088538 env[1380]: time="2023-10-02T21:10:38.087645083Z" level=info msg="Forcibly stopping sandbox \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\"" Oct 2 21:10:38.088538 env[1380]: time="2023-10-02T21:10:38.087715201Z" level=info msg="TearDown network for sandbox \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\" successfully" Oct 2 21:10:38.097040 env[1380]: time="2023-10-02T21:10:38.096971066Z" level=info msg="RemovePodSandbox \"7dd92f71e6fedfb20f52973aa21b3f520639f5609d2b02640a9e952a4c28a547\" returns successfully" Oct 2 21:10:38.247086 kubelet[2490]: E1002 21:10:38.247042 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:43.248300 kubelet[2490]: E1002 21:10:43.248262 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:48.249625 kubelet[2490]: E1002 21:10:48.249593 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:49.297000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:49.303460 kernel: kauditd_printk_skb: 19 callbacks suppressed Oct 2 21:10:49.303572 kernel: audit: type=1400 audit(1696281049.297:1415): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:49.298000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:49.345076 kernel: audit: type=1400 audit(1696281049.298:1416): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:49.345183 kernel: audit: type=1300 audit(1696281049.298:1416): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c9d400 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:10:49.298000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c9d400 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:10:49.298000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:49.396950 kernel: audit: type=1327 audit(1696281049.298:1416): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:49.397087 kernel: audit: type=1400 audit(1696281049.298:1417): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:49.298000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:49.298000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c9d420 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:10:49.445778 kernel: audit: type=1300 audit(1696281049.298:1417): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c9d420 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:10:49.298000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:49.468952 kernel: audit: type=1327 audit(1696281049.298:1417): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:49.469038 kernel: audit: type=1300 audit(1696281049.297:1415): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001351940 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:10:49.297000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001351940 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:10:49.297000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:49.519023 kernel: audit: type=1327 audit(1696281049.297:1415): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:49.519094 kernel: audit: type=1400 audit(1696281049.309:1418): avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:49.309000 audit[2353]: AVC avc: denied { watch } for pid=2353 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:49.309000 audit[2353]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c9d720 a2=fc6 a3=0 items=0 ppid=2229 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:10:49.309000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:50.485187 systemd[1]: cri-containerd-a24abf0d11bc0b8ecb58830c7401e06aecf4af06e26bf0369bacfee56f2f8a5c.scope: Deactivated successfully. Oct 2 21:10:50.485484 systemd[1]: cri-containerd-a24abf0d11bc0b8ecb58830c7401e06aecf4af06e26bf0369bacfee56f2f8a5c.scope: Consumed 3.996s CPU time. Oct 2 21:10:50.487000 audit: BPF prog-id=87 op=UNLOAD Oct 2 21:10:50.487000 audit: BPF prog-id=108 op=UNLOAD Oct 2 21:10:50.509077 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a24abf0d11bc0b8ecb58830c7401e06aecf4af06e26bf0369bacfee56f2f8a5c-rootfs.mount: Deactivated successfully. Oct 2 21:10:50.580284 env[1380]: time="2023-10-02T21:10:50.580239996Z" level=info msg="shim disconnected" id=a24abf0d11bc0b8ecb58830c7401e06aecf4af06e26bf0369bacfee56f2f8a5c Oct 2 21:10:50.580753 env[1380]: time="2023-10-02T21:10:50.580728187Z" level=warning msg="cleaning up after shim disconnected" id=a24abf0d11bc0b8ecb58830c7401e06aecf4af06e26bf0369bacfee56f2f8a5c namespace=k8s.io Oct 2 21:10:50.580846 env[1380]: time="2023-10-02T21:10:50.580832265Z" level=info msg="cleaning up dead shim" Oct 2 21:10:50.593651 env[1380]: time="2023-10-02T21:10:50.593611025Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:10:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3773 runtime=io.containerd.runc.v2\n" Oct 2 21:10:50.888509 kubelet[2490]: I1002 21:10:50.888484 2490 scope.go:117] "RemoveContainer" containerID="a24abf0d11bc0b8ecb58830c7401e06aecf4af06e26bf0369bacfee56f2f8a5c" Oct 2 21:10:50.890721 env[1380]: time="2023-10-02T21:10:50.890681004Z" level=info msg="CreateContainer within sandbox \"9192dd1e01ae614dad8720096f052d4a4d15f8cbe6b6fa3a62b80a4c500bf073\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 21:10:50.910814 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4280505199.mount: Deactivated successfully. Oct 2 21:10:50.928147 env[1380]: time="2023-10-02T21:10:50.928074502Z" level=info msg="CreateContainer within sandbox \"9192dd1e01ae614dad8720096f052d4a4d15f8cbe6b6fa3a62b80a4c500bf073\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"1ab11d3a8186b4444d0c15cf0f4b646d3a75cd68c0ba64bd74188283e360eb4b\"" Oct 2 21:10:50.928658 env[1380]: time="2023-10-02T21:10:50.928637371Z" level=info msg="StartContainer for \"1ab11d3a8186b4444d0c15cf0f4b646d3a75cd68c0ba64bd74188283e360eb4b\"" Oct 2 21:10:50.948066 systemd[1]: Started cri-containerd-1ab11d3a8186b4444d0c15cf0f4b646d3a75cd68c0ba64bd74188283e360eb4b.scope. Oct 2 21:10:50.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.964000 audit: BPF prog-id=136 op=LOAD Oct 2 21:10:50.964000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.964000 audit[3794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2229 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:50.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623131643361383138366234343434643063313563663066346236 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2229 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:50.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623131643361383138366234343434643063313563663066346236 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit: BPF prog-id=137 op=LOAD Oct 2 21:10:50.965000 audit[3794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2229 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:50.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623131643361383138366234343434643063313563663066346236 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.965000 audit: BPF prog-id=138 op=LOAD Oct 2 21:10:50.965000 audit[3794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2229 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:50.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623131643361383138366234343434643063313563663066346236 Oct 2 21:10:50.966000 audit: BPF prog-id=138 op=UNLOAD Oct 2 21:10:50.966000 audit: BPF prog-id=137 op=UNLOAD Oct 2 21:10:50.966000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.966000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.966000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.966000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.966000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.966000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.966000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.966000 audit[3794]: AVC avc: denied { perfmon } for pid=3794 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.966000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.966000 audit[3794]: AVC avc: denied { bpf } for pid=3794 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:50.966000 audit: BPF prog-id=139 op=LOAD Oct 2 21:10:50.966000 audit[3794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2229 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:50.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623131643361383138366234343434643063313563663066346236 Oct 2 21:10:50.993051 env[1380]: time="2023-10-02T21:10:50.993000482Z" level=info msg="StartContainer for \"1ab11d3a8186b4444d0c15cf0f4b646d3a75cd68c0ba64bd74188283e360eb4b\" returns successfully" Oct 2 21:10:52.689000 audit[3803]: AVC avc: denied { watch } for pid=3803 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521003 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:52.689000 audit[3803]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000073a40 a2=fc6 a3=0 items=0 ppid=2229 pid=3803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:10:52.689000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:52.689000 audit[3803]: AVC avc: denied { watch } for pid=3803 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520988 scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:10:52.689000 audit[3803]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40000754a0 a2=fc6 a3=0 items=0 ppid=2229 pid=3803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c706 key=(null) Oct 2 21:10:52.689000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:10:53.251488 kubelet[2490]: E1002 21:10:53.251447 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:10:53.929378 kubelet[2490]: E1002 21:10:53.929196 2490 controller.go:193] "Failed to update lease" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.10:33674->10.200.20.13:2379: read: connection timed out" Oct 2 21:10:53.936362 systemd[1]: cri-containerd-76f92d9fa8d82ed5c11c8896033b9c943701d8754482e60f67990c4f0d7394f3.scope: Deactivated successfully. Oct 2 21:10:53.936648 systemd[1]: cri-containerd-76f92d9fa8d82ed5c11c8896033b9c943701d8754482e60f67990c4f0d7394f3.scope: Consumed 3.504s CPU time. Oct 2 21:10:53.940000 audit: BPF prog-id=91 op=UNLOAD Oct 2 21:10:53.940000 audit: BPF prog-id=99 op=UNLOAD Oct 2 21:10:53.958885 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-76f92d9fa8d82ed5c11c8896033b9c943701d8754482e60f67990c4f0d7394f3-rootfs.mount: Deactivated successfully. Oct 2 21:10:54.019596 env[1380]: time="2023-10-02T21:10:54.019546660Z" level=info msg="shim disconnected" id=76f92d9fa8d82ed5c11c8896033b9c943701d8754482e60f67990c4f0d7394f3 Oct 2 21:10:54.019596 env[1380]: time="2023-10-02T21:10:54.019596499Z" level=warning msg="cleaning up after shim disconnected" id=76f92d9fa8d82ed5c11c8896033b9c943701d8754482e60f67990c4f0d7394f3 namespace=k8s.io Oct 2 21:10:54.019994 env[1380]: time="2023-10-02T21:10:54.019606018Z" level=info msg="cleaning up dead shim" Oct 2 21:10:54.031573 env[1380]: time="2023-10-02T21:10:54.031527635Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:10:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3832 runtime=io.containerd.runc.v2\n" Oct 2 21:10:54.898204 kubelet[2490]: I1002 21:10:54.898182 2490 scope.go:117] "RemoveContainer" containerID="76f92d9fa8d82ed5c11c8896033b9c943701d8754482e60f67990c4f0d7394f3" Oct 2 21:10:54.900365 env[1380]: time="2023-10-02T21:10:54.900329196Z" level=info msg="CreateContainer within sandbox \"063bdad17c8f5f71e117970260a1c90eace1a5eda98eda532398a36602dbd4c8\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 21:10:54.920887 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2780023162.mount: Deactivated successfully. Oct 2 21:10:54.925915 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2488993198.mount: Deactivated successfully. Oct 2 21:10:54.938425 env[1380]: time="2023-10-02T21:10:54.938348563Z" level=info msg="CreateContainer within sandbox \"063bdad17c8f5f71e117970260a1c90eace1a5eda98eda532398a36602dbd4c8\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"35d35bd27e5b18328ad55b6c0536e69d742e5e926ae514211b3e1ee91a55d285\"" Oct 2 21:10:54.938911 env[1380]: time="2023-10-02T21:10:54.938883313Z" level=info msg="StartContainer for \"35d35bd27e5b18328ad55b6c0536e69d742e5e926ae514211b3e1ee91a55d285\"" Oct 2 21:10:54.960835 systemd[1]: Started cri-containerd-35d35bd27e5b18328ad55b6c0536e69d742e5e926ae514211b3e1ee91a55d285.scope. Oct 2 21:10:54.998152 kernel: kauditd_printk_skb: 69 callbacks suppressed Oct 2 21:10:54.998286 kernel: audit: type=1400 audit(1696281054.980:1443): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:54.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:54.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.022591 kernel: audit: type=1400 audit(1696281054.980:1444): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:54.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.043929 kernel: audit: type=1400 audit(1696281054.980:1445): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:54.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.076111 kernel: audit: type=1400 audit(1696281054.980:1446): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.076602 kernel: audit: type=1400 audit(1696281054.980:1447): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:54.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.098082 kubelet[2490]: E1002 21:10:55.097666 2490 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"kube-apiserver-ci-3510.3.0-a-4ade0e9e10.178a669f6fe2d946", GenerateName:"", Namespace:"kube-system", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Pod", Namespace:"kube-system", Name:"kube-apiserver-ci-3510.3.0-a-4ade0e9e10", UID:"c31a207b2b0e732ff6b1a51bb2d73252", APIVersion:"v1", ResourceVersion:"", FieldPath:"spec.containers{kube-apiserver}"}, Reason:"Unhealthy", Message:"Readiness probe failed: HTTP probe failed with statuscode: 500", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-4ade0e9e10"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 10, 44, 621384006, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 10, 44, 621384006, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510.3.0-a-4ade0e9e10"}': 'rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.10:33464->10.200.20.13:2379: read: connection timed out' (will not retry!) Oct 2 21:10:54.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.116809 kernel: audit: type=1400 audit(1696281054.980:1448): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.116891 kernel: audit: type=1400 audit(1696281054.980:1449): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:54.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:54.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.134405 env[1380]: time="2023-10-02T21:10:55.134366132Z" level=info msg="StartContainer for \"35d35bd27e5b18328ad55b6c0536e69d742e5e926ae514211b3e1ee91a55d285\" returns successfully" Oct 2 21:10:55.150943 kernel: audit: type=1400 audit(1696281054.980:1450): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.151083 kernel: audit: type=1400 audit(1696281054.980:1451): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:54.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:54.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.185161 kernel: audit: type=1400 audit(1696281054.980:1452): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:54.980000 audit: BPF prog-id=140 op=LOAD Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { bpf } for pid=3852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2216 pid=3852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:55.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335643335626432376535623138333238616435356236633035333665 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2216 pid=3852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:55.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335643335626432376535623138333238616435356236633035333665 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { bpf } for pid=3852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { bpf } for pid=3852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { bpf } for pid=3852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { bpf } for pid=3852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { bpf } for pid=3852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit: BPF prog-id=141 op=LOAD Oct 2 21:10:55.002000 audit[3852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2216 pid=3852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:55.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335643335626432376535623138333238616435356236633035333665 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { bpf } for pid=3852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { bpf } for pid=3852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { bpf } for pid=3852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { bpf } for pid=3852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit: BPF prog-id=142 op=LOAD Oct 2 21:10:55.002000 audit[3852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2216 pid=3852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:55.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335643335626432376535623138333238616435356236633035333665 Oct 2 21:10:55.002000 audit: BPF prog-id=142 op=UNLOAD Oct 2 21:10:55.002000 audit: BPF prog-id=141 op=UNLOAD Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { bpf } for pid=3852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { bpf } for pid=3852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { bpf } for pid=3852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { perfmon } for pid=3852 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { bpf } for pid=3852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit[3852]: AVC avc: denied { bpf } for pid=3852 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:10:55.002000 audit: BPF prog-id=143 op=LOAD Oct 2 21:10:55.002000 audit[3852]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2216 pid=3852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:10:55.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335643335626432376535623138333238616435356236633035333665 Oct 2 21:10:58.252576 kubelet[2490]: E1002 21:10:58.252549 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:11:01.096056 kubelet[2490]: I1002 21:11:01.095982 2490 status_manager.go:853] "Failed to get status for pod" podUID="c31a207b2b0e732ff6b1a51bb2d73252" pod="kube-system/kube-apiserver-ci-3510.3.0-a-4ade0e9e10" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.10:33600->10.200.20.13:2379: read: connection timed out" Oct 2 21:11:03.254027 kubelet[2490]: E1002 21:11:03.254005 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:11:03.929561 kubelet[2490]: E1002 21:11:03.929536 2490 controller.go:193] "Failed to update lease" err="Put \"https://10.200.20.10:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-4ade0e9e10?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 21:11:08.255253 kubelet[2490]: E1002 21:11:08.255221 2490 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"