Oct 2 21:21:29.168126 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 21:21:29.168144 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 21:21:29.168152 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Oct 2 21:21:29.168159 kernel: printk: bootconsole [pl11] enabled Oct 2 21:21:29.168164 kernel: efi: EFI v2.70 by EDK II Oct 2 21:21:29.168169 kernel: efi: ACPI 2.0=0x3fd8d018 SMBIOS=0x3fd6a000 SMBIOS 3.0=0x3fd68000 MEMATTR=0x3ef3d098 RNG=0x3fd8d998 MEMRESERVE=0x37eb7f98 Oct 2 21:21:29.168175 kernel: random: crng init done Oct 2 21:21:29.168181 kernel: ACPI: Early table checksum verification disabled Oct 2 21:21:29.168186 kernel: ACPI: RSDP 0x000000003FD8D018 000024 (v02 VRTUAL) Oct 2 21:21:29.168192 kernel: ACPI: XSDT 0x000000003FD8DF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:21:29.168197 kernel: ACPI: FACP 0x000000003FD8DC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:21:29.168203 kernel: ACPI: DSDT 0x000000003EBD6018 01DEC0 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 21:21:29.168209 kernel: ACPI: DBG2 0x000000003FD8DB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:21:29.168214 kernel: ACPI: GTDT 0x000000003FD8DD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:21:29.168221 kernel: ACPI: OEM0 0x000000003FD8D098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:21:29.168227 kernel: ACPI: SPCR 0x000000003FD8DA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:21:29.168233 kernel: ACPI: APIC 0x000000003FD8D818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:21:29.168239 kernel: ACPI: SRAT 0x000000003FD8D198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:21:29.168245 kernel: ACPI: PPTT 0x000000003FD8D418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Oct 2 21:21:29.168251 kernel: ACPI: BGRT 0x000000003FD8DE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:21:29.168257 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Oct 2 21:21:29.168262 kernel: NUMA: Failed to initialise from firmware Oct 2 21:21:29.168268 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 21:21:29.168274 kernel: NUMA: NODE_DATA [mem 0x1bf7f3900-0x1bf7f8fff] Oct 2 21:21:29.168279 kernel: Zone ranges: Oct 2 21:21:29.168285 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Oct 2 21:21:29.168290 kernel: DMA32 empty Oct 2 21:21:29.168297 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 21:21:29.168302 kernel: Movable zone start for each node Oct 2 21:21:29.168308 kernel: Early memory node ranges Oct 2 21:21:29.168314 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Oct 2 21:21:29.168319 kernel: node 0: [mem 0x0000000000824000-0x000000003ec84fff] Oct 2 21:21:29.168325 kernel: node 0: [mem 0x000000003ec85000-0x000000003ecadfff] Oct 2 21:21:29.168331 kernel: node 0: [mem 0x000000003ecae000-0x000000003fd2dfff] Oct 2 21:21:29.168336 kernel: node 0: [mem 0x000000003fd2e000-0x000000003fd81fff] Oct 2 21:21:29.168342 kernel: node 0: [mem 0x000000003fd82000-0x000000003fd8dfff] Oct 2 21:21:29.168347 kernel: node 0: [mem 0x000000003fd8e000-0x000000003fd91fff] Oct 2 21:21:29.168353 kernel: node 0: [mem 0x000000003fd92000-0x000000003fffffff] Oct 2 21:21:29.168358 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 21:21:29.168365 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 21:21:29.168373 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Oct 2 21:21:29.168379 kernel: psci: probing for conduit method from ACPI. Oct 2 21:21:29.168385 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 21:21:29.168391 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 21:21:29.168398 kernel: psci: MIGRATE_INFO_TYPE not supported. Oct 2 21:21:29.168404 kernel: psci: SMC Calling Convention v1.4 Oct 2 21:21:29.168410 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Oct 2 21:21:29.168416 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Oct 2 21:21:29.168422 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 21:21:29.168428 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 21:21:29.168434 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 21:21:29.168440 kernel: Detected PIPT I-cache on CPU0 Oct 2 21:21:29.168446 kernel: CPU features: detected: GIC system register CPU interface Oct 2 21:21:29.168452 kernel: CPU features: detected: Hardware dirty bit management Oct 2 21:21:29.168458 kernel: CPU features: detected: Spectre-BHB Oct 2 21:21:29.168464 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 21:21:29.168472 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 21:21:29.168478 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 21:21:29.168484 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Oct 2 21:21:29.168490 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Oct 2 21:21:29.168496 kernel: Policy zone: Normal Oct 2 21:21:29.168504 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 21:21:29.168510 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 21:21:29.168516 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 21:21:29.168522 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 21:21:29.168528 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 21:21:29.168535 kernel: software IO TLB: mapped [mem 0x000000003abd6000-0x000000003ebd6000] (64MB) Oct 2 21:21:29.168542 kernel: Memory: 3992068K/4194160K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 202092K reserved, 0K cma-reserved) Oct 2 21:21:29.168548 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 21:21:29.168554 kernel: trace event string verifier disabled Oct 2 21:21:29.168560 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 21:21:29.168566 kernel: rcu: RCU event tracing is enabled. Oct 2 21:21:29.168572 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 21:21:29.168579 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 21:21:29.168585 kernel: Tracing variant of Tasks RCU enabled. Oct 2 21:21:29.168591 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 21:21:29.168597 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 21:21:29.168604 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 21:21:29.168620 kernel: GICv3: 960 SPIs implemented Oct 2 21:21:29.168627 kernel: GICv3: 0 Extended SPIs implemented Oct 2 21:21:29.168633 kernel: GICv3: Distributor has no Range Selector support Oct 2 21:21:29.168639 kernel: Root IRQ handler: gic_handle_irq Oct 2 21:21:29.168645 kernel: GICv3: 16 PPIs implemented Oct 2 21:21:29.168651 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Oct 2 21:21:29.168657 kernel: ITS: No ITS available, not enabling LPIs Oct 2 21:21:29.168663 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 21:21:29.168669 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 21:21:29.168676 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 21:21:29.168682 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 21:21:29.168689 kernel: Console: colour dummy device 80x25 Oct 2 21:21:29.168696 kernel: printk: console [tty1] enabled Oct 2 21:21:29.168702 kernel: ACPI: Core revision 20210730 Oct 2 21:21:29.168708 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 21:21:29.168714 kernel: pid_max: default: 32768 minimum: 301 Oct 2 21:21:29.168721 kernel: LSM: Security Framework initializing Oct 2 21:21:29.168727 kernel: SELinux: Initializing. Oct 2 21:21:29.168733 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 21:21:29.168740 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 21:21:29.168747 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Oct 2 21:21:29.168753 kernel: Hyper-V: Host Build 10.0.22477.1341-1-0 Oct 2 21:21:29.168760 kernel: rcu: Hierarchical SRCU implementation. Oct 2 21:21:29.168766 kernel: Remapping and enabling EFI services. Oct 2 21:21:29.168772 kernel: smp: Bringing up secondary CPUs ... Oct 2 21:21:29.168778 kernel: Detected PIPT I-cache on CPU1 Oct 2 21:21:29.168784 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Oct 2 21:21:29.168791 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 21:21:29.168797 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 21:21:29.168804 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 21:21:29.168810 kernel: SMP: Total of 2 processors activated. Oct 2 21:21:29.168816 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 21:21:29.168823 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Oct 2 21:21:29.168829 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 21:21:29.168835 kernel: CPU features: detected: CRC32 instructions Oct 2 21:21:29.168842 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 21:21:29.168848 kernel: CPU features: detected: LSE atomic instructions Oct 2 21:21:29.168854 kernel: CPU features: detected: Privileged Access Never Oct 2 21:21:29.168861 kernel: CPU: All CPU(s) started at EL1 Oct 2 21:21:29.168867 kernel: alternatives: patching kernel code Oct 2 21:21:29.168877 kernel: devtmpfs: initialized Oct 2 21:21:29.168885 kernel: KASLR enabled Oct 2 21:21:29.168891 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 21:21:29.168898 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 21:21:29.168905 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 21:21:29.168911 kernel: SMBIOS 3.1.0 present. Oct 2 21:21:29.168918 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/16/2022 Oct 2 21:21:29.168924 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 21:21:29.168932 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 21:21:29.168939 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 21:21:29.168945 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 21:21:29.168952 kernel: audit: initializing netlink subsys (disabled) Oct 2 21:21:29.168958 kernel: audit: type=2000 audit(0.106:1): state=initialized audit_enabled=0 res=1 Oct 2 21:21:29.168965 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 21:21:29.168972 kernel: cpuidle: using governor menu Oct 2 21:21:29.168979 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 21:21:29.168985 kernel: ASID allocator initialised with 32768 entries Oct 2 21:21:29.168992 kernel: ACPI: bus type PCI registered Oct 2 21:21:29.168999 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 21:21:29.169005 kernel: Serial: AMBA PL011 UART driver Oct 2 21:21:29.169012 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 21:21:29.169018 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 21:21:29.169025 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 21:21:29.169031 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 21:21:29.169039 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 21:21:29.169045 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 21:21:29.169052 kernel: ACPI: Added _OSI(Module Device) Oct 2 21:21:29.169058 kernel: ACPI: Added _OSI(Processor Device) Oct 2 21:21:29.169065 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 21:21:29.169072 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 21:21:29.169078 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 21:21:29.169085 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 21:21:29.169091 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 21:21:29.169099 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 21:21:29.169105 kernel: ACPI: Interpreter enabled Oct 2 21:21:29.169112 kernel: ACPI: Using GIC for interrupt routing Oct 2 21:21:29.169118 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Oct 2 21:21:29.169125 kernel: printk: console [ttyAMA0] enabled Oct 2 21:21:29.169131 kernel: printk: bootconsole [pl11] disabled Oct 2 21:21:29.169138 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Oct 2 21:21:29.169144 kernel: iommu: Default domain type: Translated Oct 2 21:21:29.169151 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 21:21:29.169159 kernel: vgaarb: loaded Oct 2 21:21:29.169165 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 21:21:29.169172 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 21:21:29.169178 kernel: PTP clock support registered Oct 2 21:21:29.169185 kernel: Registered efivars operations Oct 2 21:21:29.169191 kernel: No ACPI PMU IRQ for CPU0 Oct 2 21:21:29.169198 kernel: No ACPI PMU IRQ for CPU1 Oct 2 21:21:29.169204 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 21:21:29.169211 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 21:21:29.169218 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 21:21:29.169225 kernel: pnp: PnP ACPI init Oct 2 21:21:29.169231 kernel: pnp: PnP ACPI: found 0 devices Oct 2 21:21:29.169237 kernel: NET: Registered PF_INET protocol family Oct 2 21:21:29.169244 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 21:21:29.169251 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 21:21:29.169257 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 21:21:29.169264 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 21:21:29.169271 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 21:21:29.169278 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 21:21:29.169285 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 21:21:29.169292 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 21:21:29.169298 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 21:21:29.169305 kernel: PCI: CLS 0 bytes, default 64 Oct 2 21:21:29.169311 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Oct 2 21:21:29.169318 kernel: kvm [1]: HYP mode not available Oct 2 21:21:29.169324 kernel: Initialise system trusted keyrings Oct 2 21:21:29.169331 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 21:21:29.169338 kernel: Key type asymmetric registered Oct 2 21:21:29.169345 kernel: Asymmetric key parser 'x509' registered Oct 2 21:21:29.169351 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 21:21:29.169358 kernel: io scheduler mq-deadline registered Oct 2 21:21:29.169364 kernel: io scheduler kyber registered Oct 2 21:21:29.169371 kernel: io scheduler bfq registered Oct 2 21:21:29.169377 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 21:21:29.169384 kernel: thunder_xcv, ver 1.0 Oct 2 21:21:29.169390 kernel: thunder_bgx, ver 1.0 Oct 2 21:21:29.169398 kernel: nicpf, ver 1.0 Oct 2 21:21:29.169404 kernel: nicvf, ver 1.0 Oct 2 21:21:29.169568 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 21:21:29.169643 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T21:21:28 UTC (1696281688) Oct 2 21:21:29.169653 kernel: efifb: probing for efifb Oct 2 21:21:29.169660 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 21:21:29.169667 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 21:21:29.169673 kernel: efifb: scrolling: redraw Oct 2 21:21:29.169682 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 21:21:29.169688 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 21:21:29.169695 kernel: fb0: EFI VGA frame buffer device Oct 2 21:21:29.169702 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Oct 2 21:21:29.169708 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 21:21:29.169715 kernel: NET: Registered PF_INET6 protocol family Oct 2 21:21:29.169721 kernel: Segment Routing with IPv6 Oct 2 21:21:29.169728 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 21:21:29.169734 kernel: NET: Registered PF_PACKET protocol family Oct 2 21:21:29.169742 kernel: Key type dns_resolver registered Oct 2 21:21:29.169749 kernel: registered taskstats version 1 Oct 2 21:21:29.169755 kernel: Loading compiled-in X.509 certificates Oct 2 21:21:29.169762 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 21:21:29.169769 kernel: Key type .fscrypt registered Oct 2 21:21:29.169775 kernel: Key type fscrypt-provisioning registered Oct 2 21:21:29.169782 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 21:21:29.169788 kernel: ima: Allocated hash algorithm: sha1 Oct 2 21:21:29.169795 kernel: ima: No architecture policies found Oct 2 21:21:29.169802 kernel: Freeing unused kernel memory: 34560K Oct 2 21:21:29.169809 kernel: Run /init as init process Oct 2 21:21:29.169815 kernel: with arguments: Oct 2 21:21:29.169822 kernel: /init Oct 2 21:21:29.169828 kernel: with environment: Oct 2 21:21:29.169834 kernel: HOME=/ Oct 2 21:21:29.169840 kernel: TERM=linux Oct 2 21:21:29.169847 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 21:21:29.169856 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 21:21:29.169866 systemd[1]: Detected virtualization microsoft. Oct 2 21:21:29.169873 systemd[1]: Detected architecture arm64. Oct 2 21:21:29.169880 systemd[1]: Running in initrd. Oct 2 21:21:29.169887 systemd[1]: No hostname configured, using default hostname. Oct 2 21:21:29.169894 systemd[1]: Hostname set to . Oct 2 21:21:29.169901 systemd[1]: Initializing machine ID from random generator. Oct 2 21:21:29.169908 systemd[1]: Queued start job for default target initrd.target. Oct 2 21:21:29.169916 systemd[1]: Started systemd-ask-password-console.path. Oct 2 21:21:29.169923 systemd[1]: Reached target cryptsetup.target. Oct 2 21:21:29.169930 systemd[1]: Reached target paths.target. Oct 2 21:21:29.169938 systemd[1]: Reached target slices.target. Oct 2 21:21:29.169944 systemd[1]: Reached target swap.target. Oct 2 21:21:29.169951 systemd[1]: Reached target timers.target. Oct 2 21:21:29.169958 systemd[1]: Listening on iscsid.socket. Oct 2 21:21:29.169965 systemd[1]: Listening on iscsiuio.socket. Oct 2 21:21:29.169974 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 21:21:29.169981 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 21:21:29.169988 systemd[1]: Listening on systemd-journald.socket. Oct 2 21:21:29.169995 systemd[1]: Listening on systemd-networkd.socket. Oct 2 21:21:29.170002 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 21:21:29.170009 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 21:21:29.170016 systemd[1]: Reached target sockets.target. Oct 2 21:21:29.170023 systemd[1]: Starting kmod-static-nodes.service... Oct 2 21:21:29.170030 systemd[1]: Finished network-cleanup.service. Oct 2 21:21:29.170038 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 21:21:29.170045 systemd[1]: Starting systemd-journald.service... Oct 2 21:21:29.170052 systemd[1]: Starting systemd-modules-load.service... Oct 2 21:21:29.170059 systemd[1]: Starting systemd-resolved.service... Oct 2 21:21:29.170066 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 21:21:29.170077 systemd-journald[276]: Journal started Oct 2 21:21:29.170112 systemd-journald[276]: Runtime Journal (/run/log/journal/f0630a4def1a4e438ba1b2788219e8a1) is 8.0M, max 78.6M, 70.6M free. Oct 2 21:21:29.166127 systemd-modules-load[277]: Inserted module 'overlay' Oct 2 21:21:29.202626 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 21:21:29.214482 systemd[1]: Started systemd-journald.service. Oct 2 21:21:29.214539 kernel: Bridge firewalling registered Oct 2 21:21:29.214644 systemd-modules-load[277]: Inserted module 'br_netfilter' Oct 2 21:21:29.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.218436 systemd[1]: Finished kmod-static-nodes.service. Oct 2 21:21:29.250940 systemd-resolved[278]: Positive Trust Anchors: Oct 2 21:21:29.316756 kernel: audit: type=1130 audit(1696281689.217:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.316782 kernel: SCSI subsystem initialized Oct 2 21:21:29.316791 kernel: audit: type=1130 audit(1696281689.253:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.316800 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 21:21:29.316809 kernel: audit: type=1130 audit(1696281689.280:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.316819 kernel: device-mapper: uevent: version 1.0.3 Oct 2 21:21:29.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.250947 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 21:21:29.362599 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 21:21:29.362639 kernel: audit: type=1130 audit(1696281689.338:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.338000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.250976 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 21:21:29.428660 kernel: audit: type=1130 audit(1696281689.366:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.253932 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 21:21:29.262360 systemd-resolved[278]: Defaulting to hostname 'linux'. Oct 2 21:21:29.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.280839 systemd[1]: Started systemd-resolved.service. Oct 2 21:21:29.474590 kernel: audit: type=1130 audit(1696281689.433:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.332536 systemd-modules-load[277]: Inserted module 'dm_multipath' Oct 2 21:21:29.339078 systemd[1]: Finished systemd-modules-load.service. Oct 2 21:21:29.367444 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 21:21:29.433860 systemd[1]: Reached target nss-lookup.target. Oct 2 21:21:29.459023 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 21:21:29.468353 systemd[1]: Starting systemd-sysctl.service... Oct 2 21:21:29.503087 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 21:21:29.532663 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 21:21:29.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.538737 systemd[1]: Finished systemd-sysctl.service. Oct 2 21:21:29.591692 kernel: audit: type=1130 audit(1696281689.537:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.591719 kernel: audit: type=1130 audit(1696281689.564:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.564541 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 21:21:29.624620 kernel: audit: type=1130 audit(1696281689.568:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.591979 systemd[1]: Starting dracut-cmdline.service... Oct 2 21:21:29.639041 dracut-cmdline[298]: dracut-dracut-053 Oct 2 21:21:29.643935 dracut-cmdline[298]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 21:21:29.775653 kernel: Loading iSCSI transport class v2.0-870. Oct 2 21:21:29.786650 kernel: iscsi: registered transport (tcp) Oct 2 21:21:29.816398 kernel: iscsi: registered transport (qla4xxx) Oct 2 21:21:29.816439 kernel: QLogic iSCSI HBA Driver Oct 2 21:21:29.922700 systemd[1]: Finished dracut-cmdline.service. Oct 2 21:21:29.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:29.928158 systemd[1]: Starting dracut-pre-udev.service... Oct 2 21:21:30.001650 kernel: raid6: neonx8 gen() 13804 MB/s Oct 2 21:21:30.018620 kernel: raid6: neonx8 xor() 10784 MB/s Oct 2 21:21:30.038621 kernel: raid6: neonx4 gen() 13552 MB/s Oct 2 21:21:30.059620 kernel: raid6: neonx4 xor() 11303 MB/s Oct 2 21:21:30.079619 kernel: raid6: neonx2 gen() 13114 MB/s Oct 2 21:21:30.102635 kernel: raid6: neonx2 xor() 10185 MB/s Oct 2 21:21:30.123620 kernel: raid6: neonx1 gen() 10445 MB/s Oct 2 21:21:30.143619 kernel: raid6: neonx1 xor() 8789 MB/s Oct 2 21:21:30.163623 kernel: raid6: int64x8 gen() 6298 MB/s Oct 2 21:21:30.185646 kernel: raid6: int64x8 xor() 3548 MB/s Oct 2 21:21:30.208632 kernel: raid6: int64x4 gen() 7166 MB/s Oct 2 21:21:30.228623 kernel: raid6: int64x4 xor() 3851 MB/s Oct 2 21:21:30.250619 kernel: raid6: int64x2 gen() 6153 MB/s Oct 2 21:21:30.270619 kernel: raid6: int64x2 xor() 3324 MB/s Oct 2 21:21:30.296640 kernel: raid6: int64x1 gen() 5044 MB/s Oct 2 21:21:30.320819 kernel: raid6: int64x1 xor() 2625 MB/s Oct 2 21:21:30.320830 kernel: raid6: using algorithm neonx8 gen() 13804 MB/s Oct 2 21:21:30.320838 kernel: raid6: .... xor() 10784 MB/s, rmw enabled Oct 2 21:21:30.325040 kernel: raid6: using neon recovery algorithm Oct 2 21:21:30.347030 kernel: xor: measuring software checksum speed Oct 2 21:21:30.347041 kernel: 8regs : 17304 MB/sec Oct 2 21:21:30.351200 kernel: 32regs : 20760 MB/sec Oct 2 21:21:30.355147 kernel: arm64_neon : 27788 MB/sec Oct 2 21:21:30.355156 kernel: xor: using function: arm64_neon (27788 MB/sec) Oct 2 21:21:30.423626 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 21:21:30.441984 systemd[1]: Finished dracut-pre-udev.service. Oct 2 21:21:30.446000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:30.449000 audit: BPF prog-id=7 op=LOAD Oct 2 21:21:30.449000 audit: BPF prog-id=8 op=LOAD Oct 2 21:21:30.450655 systemd[1]: Starting systemd-udevd.service... Oct 2 21:21:30.467693 systemd-udevd[475]: Using default interface naming scheme 'v252'. Oct 2 21:21:30.474728 systemd[1]: Started systemd-udevd.service. Oct 2 21:21:30.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:30.484592 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 21:21:30.525578 dracut-pre-trigger[493]: rd.md=0: removing MD RAID activation Oct 2 21:21:30.587151 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 21:21:30.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:30.599597 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 21:21:30.647875 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 21:21:30.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:30.724638 kernel: hv_vmbus: Vmbus version:5.3 Oct 2 21:21:30.733638 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 21:21:30.758665 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 21:21:30.758723 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 21:21:30.758733 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 21:21:30.766534 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 21:21:30.771814 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 21:21:30.771847 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 21:21:30.797542 kernel: scsi host1: storvsc_host_t Oct 2 21:21:30.797818 kernel: scsi host0: storvsc_host_t Oct 2 21:21:30.808655 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 21:21:30.821697 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 21:21:30.839571 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 21:21:30.839782 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 21:21:30.840629 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 21:21:30.858252 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 21:21:30.858431 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 21:21:30.858512 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 21:21:30.870042 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 21:21:30.870176 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 21:21:30.876631 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 21:21:30.890714 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 21:21:30.890903 kernel: hv_netvsc 000d3ac5-27de-000d-3ac5-27de000d3ac5 eth0: VF slot 1 added Oct 2 21:21:30.912644 kernel: hv_vmbus: registering driver hv_pci Oct 2 21:21:30.921637 kernel: hv_pci 96d62a0f-4558-465f-8764-2258cad5cb79: PCI VMBus probing: Using version 0x10004 Oct 2 21:21:30.941314 kernel: hv_pci 96d62a0f-4558-465f-8764-2258cad5cb79: PCI host bridge to bus 4558:00 Oct 2 21:21:30.941495 kernel: pci_bus 4558:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Oct 2 21:21:30.948645 kernel: pci_bus 4558:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 21:21:31.149151 kernel: pci 4558:00:02.0: [15b3:1018] type 00 class 0x020000 Oct 2 21:21:31.161376 kernel: pci 4558:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 21:21:31.181708 kernel: pci 4558:00:02.0: enabling Extended Tags Oct 2 21:21:31.220833 kernel: pci 4558:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 4558:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Oct 2 21:21:31.221027 kernel: pci_bus 4558:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 21:21:31.227414 kernel: pci 4558:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 21:21:31.268638 kernel: mlx5_core 4558:00:02.0: firmware version: 16.31.2424 Oct 2 21:21:31.433633 kernel: mlx5_core 4558:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Oct 2 21:21:31.522880 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 21:21:31.548638 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (543) Oct 2 21:21:31.567363 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 21:21:31.595292 kernel: hv_netvsc 000d3ac5-27de-000d-3ac5-27de000d3ac5 eth0: VF registering: eth1 Oct 2 21:21:31.595533 kernel: mlx5_core 4558:00:02.0 eth1: joined to eth0 Oct 2 21:21:31.613632 kernel: mlx5_core 4558:00:02.0 enP17752s1: renamed from eth1 Oct 2 21:21:31.739300 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 21:21:31.818929 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 21:21:31.824940 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 21:21:31.838941 systemd[1]: Starting disk-uuid.service... Oct 2 21:21:31.866057 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 21:21:32.896650 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 21:21:32.896708 disk-uuid[603]: The operation has completed successfully. Oct 2 21:21:32.984972 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 21:21:32.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:32.985079 systemd[1]: Finished disk-uuid.service. Oct 2 21:21:33.050487 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 21:21:33.050988 kernel: audit: type=1130 audit(1696281692.992:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:33.051002 kernel: audit: type=1131 audit(1696281692.992:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:32.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:33.012888 systemd[1]: Starting verity-setup.service... Oct 2 21:21:33.088924 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 21:21:33.329788 systemd[1]: Found device dev-mapper-usr.device. Oct 2 21:21:33.335486 systemd[1]: Mounting sysusr-usr.mount... Oct 2 21:21:33.347655 systemd[1]: Finished verity-setup.service. Oct 2 21:21:33.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:33.374641 kernel: audit: type=1130 audit(1696281693.353:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:33.427653 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 21:21:33.428367 systemd[1]: Mounted sysusr-usr.mount. Oct 2 21:21:33.433079 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 21:21:33.433920 systemd[1]: Starting ignition-setup.service... Oct 2 21:21:33.442638 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 21:21:33.479858 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 21:21:33.479904 kernel: BTRFS info (device sda6): using free space tree Oct 2 21:21:33.484653 kernel: BTRFS info (device sda6): has skinny extents Oct 2 21:21:33.577259 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 21:21:33.658679 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 21:21:33.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:33.683000 audit: BPF prog-id=9 op=LOAD Oct 2 21:21:33.685560 systemd[1]: Starting systemd-networkd.service... Oct 2 21:21:33.712350 kernel: audit: type=1130 audit(1696281693.663:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:33.712375 kernel: audit: type=1334 audit(1696281693.683:22): prog-id=9 op=LOAD Oct 2 21:21:33.733461 systemd-networkd[848]: lo: Link UP Oct 2 21:21:33.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:33.733474 systemd-networkd[848]: lo: Gained carrier Oct 2 21:21:33.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:33.734168 systemd-networkd[848]: Enumeration completed Oct 2 21:21:33.801972 kernel: audit: type=1130 audit(1696281693.738:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:33.802011 kernel: audit: type=1130 audit(1696281693.761:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:33.734243 systemd[1]: Started systemd-networkd.service. Oct 2 21:21:33.756518 systemd[1]: Finished ignition-setup.service. Oct 2 21:21:33.762306 systemd-networkd[848]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 21:21:33.763265 systemd[1]: Reached target network.target. Oct 2 21:21:33.795821 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 21:21:33.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:33.818653 systemd[1]: Starting iscsiuio.service... Oct 2 21:21:33.834445 systemd[1]: Started iscsiuio.service. Oct 2 21:21:33.866209 systemd[1]: Starting iscsid.service... Oct 2 21:21:33.875181 iscsid[855]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 21:21:33.875181 iscsid[855]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 21:21:33.875181 iscsid[855]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 21:21:33.875181 iscsid[855]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 21:21:33.875181 iscsid[855]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 21:21:33.875181 iscsid[855]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 21:21:33.875181 iscsid[855]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 21:21:34.060067 kernel: audit: type=1130 audit(1696281693.843:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:34.060101 kernel: audit: type=1130 audit(1696281693.897:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:34.060111 kernel: mlx5_core 4558:00:02.0 enP17752s1: Link up Oct 2 21:21:34.060267 kernel: audit: type=1130 audit(1696281693.979:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:34.060278 kernel: hv_netvsc 000d3ac5-27de-000d-3ac5-27de000d3ac5 eth0: Data path switched to VF: enP17752s1 Oct 2 21:21:34.060360 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 21:21:33.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:33.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:33.880547 systemd[1]: Started iscsid.service. Oct 2 21:21:33.923068 systemd[1]: Starting dracut-initqueue.service... Oct 2 21:21:33.975360 systemd[1]: Finished dracut-initqueue.service. Oct 2 21:21:33.980309 systemd[1]: Reached target remote-fs-pre.target. Oct 2 21:21:34.024672 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 21:21:34.037614 systemd[1]: Reached target remote-fs.target. Oct 2 21:21:34.064481 systemd-networkd[848]: enP17752s1: Link UP Oct 2 21:21:34.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:34.064560 systemd-networkd[848]: eth0: Link UP Oct 2 21:21:34.064702 systemd-networkd[848]: eth0: Gained carrier Oct 2 21:21:34.066078 systemd[1]: Starting dracut-pre-mount.service... Oct 2 21:21:34.074815 systemd-networkd[848]: enP17752s1: Gained carrier Oct 2 21:21:34.081695 systemd-networkd[848]: eth0: DHCPv4 address 10.200.20.19/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 21:21:34.115891 systemd[1]: Finished dracut-pre-mount.service. Oct 2 21:21:35.174713 systemd-networkd[848]: eth0: Gained IPv6LL Oct 2 21:21:36.893860 ignition[851]: Ignition 2.14.0 Oct 2 21:21:36.897954 ignition[851]: Stage: fetch-offline Oct 2 21:21:36.898111 ignition[851]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:21:36.898170 ignition[851]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:21:37.021582 ignition[851]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:21:37.025936 ignition[851]: parsed url from cmdline: "" Oct 2 21:21:37.025941 ignition[851]: no config URL provided Oct 2 21:21:37.025948 ignition[851]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 21:21:37.025961 ignition[851]: no config at "/usr/lib/ignition/user.ign" Oct 2 21:21:37.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:37.032457 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 21:21:37.025966 ignition[851]: failed to fetch config: resource requires networking Oct 2 21:21:37.044197 systemd[1]: Starting ignition-fetch.service... Oct 2 21:21:37.026313 ignition[851]: Ignition finished successfully Oct 2 21:21:37.066239 ignition[874]: Ignition 2.14.0 Oct 2 21:21:37.066245 ignition[874]: Stage: fetch Oct 2 21:21:37.066377 ignition[874]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:21:37.066402 ignition[874]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:21:37.073906 ignition[874]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:21:37.074067 ignition[874]: parsed url from cmdline: "" Oct 2 21:21:37.074070 ignition[874]: no config URL provided Oct 2 21:21:37.074075 ignition[874]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 21:21:37.074086 ignition[874]: no config at "/usr/lib/ignition/user.ign" Oct 2 21:21:37.074117 ignition[874]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 21:21:37.101723 ignition[874]: GET result: OK Oct 2 21:21:37.101750 ignition[874]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 21:21:37.146925 ignition[874]: opening config device: "/dev/sr0" Oct 2 21:21:37.147282 ignition[874]: getting drive status for "/dev/sr0" Oct 2 21:21:37.147324 ignition[874]: drive status: OK Oct 2 21:21:37.147386 ignition[874]: mounting config device Oct 2 21:21:37.147408 ignition[874]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure2898070884" Oct 2 21:21:37.173632 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 21:21:37.174371 ignition[874]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure2898070884" Oct 2 21:21:37.174387 ignition[874]: checking for config drive Oct 2 21:21:37.175369 systemd[1]: tmp-ignition\x2dazure2898070884.mount: Deactivated successfully. Oct 2 21:21:37.174718 ignition[874]: reading config Oct 2 21:21:37.175083 ignition[874]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure2898070884" Oct 2 21:21:37.180990 ignition[874]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure2898070884" Oct 2 21:21:37.181013 ignition[874]: config has been read from custom data Oct 2 21:21:37.181214 ignition[874]: parsing config with SHA512: b44c9779c37e44f963598b95062b67bd59af0c4b4305020d1ce804d338e0a549188e602f286216d1a71689ad09310b31efa410f7f7b995b972bd2fb1a5eee6c8 Oct 2 21:21:37.228510 unknown[874]: fetched base config from "system" Oct 2 21:21:37.229644 unknown[874]: fetched base config from "system" Oct 2 21:21:37.230165 ignition[874]: fetch: fetch complete Oct 2 21:21:37.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:37.229651 unknown[874]: fetched user config from "azure" Oct 2 21:21:37.230170 ignition[874]: fetch: fetch passed Oct 2 21:21:37.233854 systemd[1]: Finished ignition-fetch.service. Oct 2 21:21:37.230213 ignition[874]: Ignition finished successfully Oct 2 21:21:37.242774 systemd[1]: Starting ignition-kargs.service... Oct 2 21:21:37.265244 ignition[883]: Ignition 2.14.0 Oct 2 21:21:37.265250 ignition[883]: Stage: kargs Oct 2 21:21:37.265360 ignition[883]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:21:37.278948 systemd[1]: Finished ignition-kargs.service. Oct 2 21:21:37.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:37.265382 ignition[883]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:21:37.295245 systemd[1]: Starting ignition-disks.service... Oct 2 21:21:37.269100 ignition[883]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:21:37.276232 ignition[883]: kargs: kargs passed Oct 2 21:21:37.276307 ignition[883]: Ignition finished successfully Oct 2 21:21:37.324219 ignition[889]: Ignition 2.14.0 Oct 2 21:21:37.324224 ignition[889]: Stage: disks Oct 2 21:21:37.324348 ignition[889]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:21:37.324371 ignition[889]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:21:37.347778 ignition[889]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:21:37.349232 ignition[889]: disks: disks passed Oct 2 21:21:37.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:37.354606 systemd[1]: Finished ignition-disks.service. Oct 2 21:21:37.349290 ignition[889]: Ignition finished successfully Oct 2 21:21:37.360043 systemd[1]: Reached target initrd-root-device.target. Oct 2 21:21:37.371962 systemd[1]: Reached target local-fs-pre.target. Oct 2 21:21:37.381760 systemd[1]: Reached target local-fs.target. Oct 2 21:21:37.395266 systemd[1]: Reached target sysinit.target. Oct 2 21:21:37.413486 systemd[1]: Reached target basic.target. Oct 2 21:21:37.424441 systemd[1]: Starting systemd-fsck-root.service... Oct 2 21:21:37.512102 systemd-fsck[897]: ROOT: clean, 603/7326000 files, 481067/7359488 blocks Oct 2 21:21:37.524027 systemd[1]: Finished systemd-fsck-root.service. Oct 2 21:21:37.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:37.529648 systemd[1]: Mounting sysroot.mount... Oct 2 21:21:37.558657 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 21:21:37.559440 systemd[1]: Mounted sysroot.mount. Oct 2 21:21:37.566875 systemd[1]: Reached target initrd-root-fs.target. Oct 2 21:21:37.604806 systemd[1]: Mounting sysroot-usr.mount... Oct 2 21:21:37.620439 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 21:21:37.630255 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 21:21:37.630302 systemd[1]: Reached target ignition-diskful.target. Oct 2 21:21:37.645397 systemd[1]: Mounted sysroot-usr.mount. Oct 2 21:21:37.683005 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 21:21:37.689858 systemd[1]: Starting initrd-setup-root.service... Oct 2 21:21:37.726771 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (907) Oct 2 21:21:37.741370 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 21:21:37.741424 kernel: BTRFS info (device sda6): using free space tree Oct 2 21:21:37.746631 kernel: BTRFS info (device sda6): has skinny extents Oct 2 21:21:37.746673 initrd-setup-root[912]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 21:21:37.759439 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 21:21:37.794527 initrd-setup-root[938]: cut: /sysroot/etc/group: No such file or directory Oct 2 21:21:37.819495 initrd-setup-root[946]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 21:21:37.834198 initrd-setup-root[954]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 21:21:38.307102 systemd[1]: Finished initrd-setup-root.service. Oct 2 21:21:38.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:38.328491 kernel: kauditd_printk_skb: 6 callbacks suppressed Oct 2 21:21:38.328533 kernel: audit: type=1130 audit(1696281698.313:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:38.323602 systemd[1]: Starting ignition-mount.service... Oct 2 21:21:38.350747 systemd[1]: Starting sysroot-boot.service... Oct 2 21:21:38.359498 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 21:21:38.359627 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 21:21:38.402875 ignition[973]: INFO : Ignition 2.14.0 Oct 2 21:21:38.402875 ignition[973]: INFO : Stage: mount Oct 2 21:21:38.402875 ignition[973]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:21:38.402875 ignition[973]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:21:38.459420 kernel: audit: type=1130 audit(1696281698.420:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:38.459443 kernel: audit: type=1130 audit(1696281698.459:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:38.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:38.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:38.459580 ignition[973]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:21:38.459580 ignition[973]: INFO : mount: mount passed Oct 2 21:21:38.459580 ignition[973]: INFO : Ignition finished successfully Oct 2 21:21:38.414202 systemd[1]: Finished sysroot-boot.service. Oct 2 21:21:38.421533 systemd[1]: Finished ignition-mount.service. Oct 2 21:21:39.180709 coreos-metadata[906]: Oct 02 21:21:39.180 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 21:21:39.194135 coreos-metadata[906]: Oct 02 21:21:39.193 INFO Fetch successful Oct 2 21:21:39.226958 coreos-metadata[906]: Oct 02 21:21:39.226 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 21:21:39.238964 coreos-metadata[906]: Oct 02 21:21:39.238 INFO Fetch successful Oct 2 21:21:39.244986 coreos-metadata[906]: Oct 02 21:21:39.244 INFO wrote hostname ci-3510.3.0-a-74bdccafa3 to /sysroot/etc/hostname Oct 2 21:21:39.253769 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 21:21:39.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:39.280745 systemd[1]: Starting ignition-files.service... Oct 2 21:21:39.293318 kernel: audit: type=1130 audit(1696281699.258:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:39.304410 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 21:21:39.322641 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (985) Oct 2 21:21:39.334490 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 21:21:39.334512 kernel: BTRFS info (device sda6): using free space tree Oct 2 21:21:39.334522 kernel: BTRFS info (device sda6): has skinny extents Oct 2 21:21:39.344991 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 21:21:39.371044 ignition[1004]: INFO : Ignition 2.14.0 Oct 2 21:21:39.375521 ignition[1004]: INFO : Stage: files Oct 2 21:21:39.375521 ignition[1004]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:21:39.375521 ignition[1004]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:21:39.411451 ignition[1004]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:21:39.411451 ignition[1004]: DEBUG : files: compiled without relabeling support, skipping Oct 2 21:21:39.411451 ignition[1004]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 21:21:39.411451 ignition[1004]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 21:21:39.476267 ignition[1004]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 21:21:39.483767 ignition[1004]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 21:21:39.497443 unknown[1004]: wrote ssh authorized keys file for user: core Oct 2 21:21:39.508130 ignition[1004]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 21:21:39.517301 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 21:21:39.517301 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 21:21:39.780479 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 21:21:40.390941 ignition[1004]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 21:21:40.418086 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 21:21:40.418086 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 21:21:40.418086 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 21:21:40.496659 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 21:21:40.641313 ignition[1004]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 21:21:40.658591 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 21:21:40.658591 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 21:21:40.658591 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubeadm: attempt #1 Oct 2 21:21:40.735073 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 21:21:41.016633 kernel: mlx5_core 4558:00:02.0: poll_health:739:(pid 0): device's health compromised - reached miss count Oct 2 21:21:41.263527 ignition[1004]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 45b3100984c979ba0f1c0df8f4211474c2d75ebe916e677dff5fc8e3b3697cf7a953da94e356f39684cc860dff6878b772b7514c55651c2f866d9efeef23f970 Oct 2 21:21:41.281764 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 21:21:41.281764 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 21:21:41.281764 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubelet: attempt #1 Oct 2 21:21:41.328104 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 21:21:42.704439 ignition[1004]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 71857ff499ae135fa478e1827a0ed8865e578a8d2b1e25876e914fd0beba03733801c0654bcd4c0567bafeb16887dafb2dbbe8d1116e6ea28dcd8366c142d348 Oct 2 21:21:42.731606 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 21:21:42.731606 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 21:21:42.731606 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubectl: attempt #1 Oct 2 21:21:42.763053 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 21:21:43.379125 ignition[1004]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 14be61ec35669a27acf2df0380afb85b9b42311d50ca1165718421c5f605df1119ec9ae314696a674051712e80deeaa65e62d2d62ed4d107fe99d0aaf419dafc Oct 2 21:21:43.404276 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 21:21:43.404276 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 21:21:43.404276 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 21:21:43.404276 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 21:21:43.449295 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 21:21:43.477677 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 21:21:43.538401 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 21:21:43.555522 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 21:21:43.555522 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 21:21:43.555522 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 21:21:43.555522 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 21:21:43.555522 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 21:21:43.555522 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 21:21:43.555522 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3182312626" Oct 2 21:21:43.555522 ignition[1004]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3182312626": device or resource busy Oct 2 21:21:43.555522 ignition[1004]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3182312626", trying btrfs: device or resource busy Oct 2 21:21:43.555522 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3182312626" Oct 2 21:21:43.728183 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (1007) Oct 2 21:21:43.728218 kernel: audit: type=1130 audit(1696281703.637:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:43.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:43.728283 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3182312626" Oct 2 21:21:43.728283 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem3182312626" Oct 2 21:21:43.728283 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem3182312626" Oct 2 21:21:43.728283 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 21:21:43.728283 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 21:21:43.728283 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 21:21:43.728283 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3530248460" Oct 2 21:21:43.728283 ignition[1004]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3530248460": device or resource busy Oct 2 21:21:43.728283 ignition[1004]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3530248460", trying btrfs: device or resource busy Oct 2 21:21:43.728283 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3530248460" Oct 2 21:21:43.728283 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3530248460" Oct 2 21:21:43.728283 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem3530248460" Oct 2 21:21:43.728283 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem3530248460" Oct 2 21:21:43.728283 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 21:21:43.728283 ignition[1004]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 21:21:43.728283 ignition[1004]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 21:21:44.099852 kernel: audit: type=1130 audit(1696281703.767:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.099882 kernel: audit: type=1131 audit(1696281703.767:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.099898 kernel: audit: type=1130 audit(1696281703.846:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.099909 kernel: audit: type=1130 audit(1696281703.957:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.099918 kernel: audit: type=1131 audit(1696281703.984:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:43.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:43.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:43.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:43.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:43.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:43.576806 systemd[1]: mnt-oem3182312626.mount: Deactivated successfully. Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(1a): [started] setting preset to enabled for "waagent.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(1a): [finished] setting preset to enabled for "waagent.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(1b): [started] setting preset to enabled for "nvidia.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(1b): [finished] setting preset to enabled for "nvidia.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(1d): [started] setting preset to enabled for "prepare-critools.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: op(1d): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 21:21:44.111722 ignition[1004]: INFO : files: files passed Oct 2 21:21:44.471758 kernel: audit: type=1130 audit(1696281704.131:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.471785 kernel: audit: type=1131 audit(1696281704.235:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.471796 kernel: audit: type=1131 audit(1696281704.435:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:43.590075 systemd[1]: mnt-oem3530248460.mount: Deactivated successfully. Oct 2 21:21:44.475000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.507907 ignition[1004]: INFO : Ignition finished successfully Oct 2 21:21:44.520458 kernel: audit: type=1131 audit(1696281704.475:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:43.621958 systemd[1]: Finished ignition-files.service. Oct 2 21:21:44.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.528542 initrd-setup-root-after-ignition[1029]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 21:21:44.533000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:43.667270 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 21:21:43.711939 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 21:21:43.727866 systemd[1]: Starting ignition-quench.service... Oct 2 21:21:43.743770 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 21:21:44.593000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:43.743901 systemd[1]: Finished ignition-quench.service. Oct 2 21:21:43.799116 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 21:21:44.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:43.846489 systemd[1]: Reached target ignition-complete.target. Oct 2 21:21:44.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.621000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.621828 ignition[1042]: INFO : Ignition 2.14.0 Oct 2 21:21:44.621828 ignition[1042]: INFO : Stage: umount Oct 2 21:21:44.621828 ignition[1042]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:21:44.621828 ignition[1042]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:21:44.621828 ignition[1042]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:21:44.621828 ignition[1042]: INFO : umount: umount passed Oct 2 21:21:44.621828 ignition[1042]: INFO : Ignition finished successfully Oct 2 21:21:44.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.637000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.665000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:43.883512 systemd[1]: Starting initrd-parse-etc.service... Oct 2 21:21:43.953172 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 21:21:43.953274 systemd[1]: Finished initrd-parse-etc.service. Oct 2 21:21:43.985833 systemd[1]: Reached target initrd-fs.target. Oct 2 21:21:44.035856 systemd[1]: Reached target initrd.target. Oct 2 21:21:44.050073 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 21:21:44.059999 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 21:21:44.121090 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 21:21:44.771000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.133851 systemd[1]: Starting initrd-cleanup.service... Oct 2 21:21:44.172591 systemd[1]: Stopped target nss-lookup.target. Oct 2 21:21:44.179801 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 21:21:44.804000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.210072 systemd[1]: Stopped target timers.target. Oct 2 21:21:44.816000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.223855 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 21:21:44.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.825000 audit: BPF prog-id=6 op=UNLOAD Oct 2 21:21:44.223926 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 21:21:44.235571 systemd[1]: Stopped target initrd.target. Oct 2 21:21:44.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.268484 systemd[1]: Stopped target basic.target. Oct 2 21:21:44.284398 systemd[1]: Stopped target ignition-complete.target. Oct 2 21:21:44.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.306082 systemd[1]: Stopped target ignition-diskful.target. Oct 2 21:21:44.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.322648 systemd[1]: Stopped target initrd-root-device.target. Oct 2 21:21:44.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.334647 systemd[1]: Stopped target remote-fs.target. Oct 2 21:21:44.346068 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 21:21:44.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.358617 systemd[1]: Stopped target sysinit.target. Oct 2 21:21:44.370999 systemd[1]: Stopped target local-fs.target. Oct 2 21:21:44.383402 systemd[1]: Stopped target local-fs-pre.target. Oct 2 21:21:44.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.407734 systemd[1]: Stopped target swap.target. Oct 2 21:21:44.934000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.421629 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 21:21:44.942000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.421694 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 21:21:44.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.963000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.435475 systemd[1]: Stopped target cryptsetup.target. Oct 2 21:21:44.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.467761 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 21:21:44.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.981000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.467822 systemd[1]: Stopped dracut-initqueue.service. Oct 2 21:21:44.476121 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 21:21:45.007266 kernel: hv_netvsc 000d3ac5-27de-000d-3ac5-27de000d3ac5 eth0: Data path switched from VF: enP17752s1 Oct 2 21:21:44.476158 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 21:21:44.515846 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 21:21:44.515889 systemd[1]: Stopped ignition-files.service. Oct 2 21:21:44.524656 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 21:21:44.524698 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 21:21:44.541909 systemd[1]: Stopping ignition-mount.service... Oct 2 21:21:44.566758 systemd[1]: Stopping iscsiuio.service... Oct 2 21:21:44.571437 systemd[1]: Stopping sysroot-boot.service... Oct 2 21:21:44.580311 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 21:21:44.580382 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 21:21:44.593592 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 21:21:44.593679 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 21:21:44.608074 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 21:21:44.608182 systemd[1]: Stopped iscsiuio.service. Oct 2 21:21:44.612485 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 21:21:44.612561 systemd[1]: Finished initrd-cleanup.service. Oct 2 21:21:44.621380 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 21:21:44.621460 systemd[1]: Stopped ignition-mount.service. Oct 2 21:21:44.630208 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 21:21:44.630267 systemd[1]: Stopped ignition-disks.service. Oct 2 21:21:44.637593 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 21:21:44.637641 systemd[1]: Stopped ignition-kargs.service. Oct 2 21:21:45.124000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:44.648296 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 21:21:44.648330 systemd[1]: Stopped ignition-fetch.service. Oct 2 21:21:44.665980 systemd[1]: Stopped target network.target. Oct 2 21:21:44.676402 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 21:21:44.676459 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 21:21:44.685017 systemd[1]: Stopped target paths.target. Oct 2 21:21:44.699931 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 21:21:44.707682 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 21:21:44.727340 systemd[1]: Stopped target slices.target. Oct 2 21:21:44.737652 systemd[1]: Stopped target sockets.target. Oct 2 21:21:44.745690 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 21:21:44.745731 systemd[1]: Closed iscsid.socket. Oct 2 21:21:45.207724 iscsid[855]: iscsid shutting down. Oct 2 21:21:44.752865 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 21:21:44.752909 systemd[1]: Closed iscsiuio.socket. Oct 2 21:21:44.763597 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 21:21:44.763650 systemd[1]: Stopped ignition-setup.service. Oct 2 21:21:44.772451 systemd[1]: Stopping systemd-networkd.service... Oct 2 21:21:44.780180 systemd[1]: Stopping systemd-resolved.service... Oct 2 21:21:44.789789 systemd-networkd[848]: eth0: DHCPv6 lease lost Oct 2 21:21:45.207000 audit: BPF prog-id=9 op=UNLOAD Oct 2 21:21:44.795102 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 21:21:44.795688 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 21:21:44.795803 systemd[1]: Stopped systemd-resolved.service. Oct 2 21:21:44.805920 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 21:21:44.806020 systemd[1]: Stopped systemd-networkd.service. Oct 2 21:21:44.817674 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 21:21:44.817763 systemd[1]: Stopped sysroot-boot.service. Oct 2 21:21:44.825806 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 21:21:44.825872 systemd[1]: Closed systemd-networkd.socket. Oct 2 21:21:44.835040 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 21:21:44.835087 systemd[1]: Stopped initrd-setup-root.service. Oct 2 21:21:44.844886 systemd[1]: Stopping network-cleanup.service... Oct 2 21:21:44.852604 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 21:21:44.856072 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 21:21:44.861487 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 21:21:44.861560 systemd[1]: Stopped systemd-sysctl.service. Oct 2 21:21:44.874463 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 21:21:44.874521 systemd[1]: Stopped systemd-modules-load.service. Oct 2 21:21:44.879430 systemd[1]: Stopping systemd-udevd.service... Oct 2 21:21:44.888763 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 21:21:44.893915 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 21:21:44.894077 systemd[1]: Stopped systemd-udevd.service. Oct 2 21:21:44.900156 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 21:21:45.208655 systemd-journald[276]: Received SIGTERM from PID 1 (n/a). Oct 2 21:21:44.900208 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 21:21:44.909506 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 21:21:44.909555 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 21:21:44.918338 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 21:21:44.918406 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 21:21:44.926649 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 21:21:44.926693 systemd[1]: Stopped dracut-cmdline.service. Oct 2 21:21:44.934864 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 21:21:44.934908 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 21:21:44.943925 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 21:21:44.953926 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 21:21:44.953997 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 21:21:44.959694 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 21:21:44.959741 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 21:21:44.966776 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 21:21:44.966832 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 21:21:44.973689 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 21:21:44.974200 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 21:21:44.974299 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 21:21:45.106948 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 21:21:45.107116 systemd[1]: Stopped network-cleanup.service. Oct 2 21:21:45.124627 systemd[1]: Reached target initrd-switch-root.target. Oct 2 21:21:45.134757 systemd[1]: Starting initrd-switch-root.service... Oct 2 21:21:45.155762 systemd[1]: Switching root. Oct 2 21:21:45.209278 systemd-journald[276]: Journal stopped Oct 2 21:21:57.222981 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 21:21:57.223003 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 21:21:57.223013 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 21:21:57.223022 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 21:21:57.223030 kernel: SELinux: policy capability open_perms=1 Oct 2 21:21:57.223038 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 21:21:57.223047 kernel: SELinux: policy capability always_check_network=0 Oct 2 21:21:57.223055 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 21:21:57.223063 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 21:21:57.223071 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 21:21:57.223081 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 21:21:57.223091 systemd[1]: Successfully loaded SELinux policy in 387.451ms. Oct 2 21:21:57.223101 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 24.661ms. Oct 2 21:21:57.223111 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 21:21:57.223123 systemd[1]: Detected virtualization microsoft. Oct 2 21:21:57.223131 systemd[1]: Detected architecture arm64. Oct 2 21:21:57.223140 systemd[1]: Detected first boot. Oct 2 21:21:57.223149 systemd[1]: Hostname set to . Oct 2 21:21:57.223158 systemd[1]: Initializing machine ID from random generator. Oct 2 21:21:57.223166 kernel: kauditd_printk_skb: 34 callbacks suppressed Oct 2 21:21:57.223175 kernel: audit: type=1400 audit(1696281708.764:82): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 21:21:57.223184 kernel: audit: type=1400 audit(1696281708.767:83): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 21:21:57.223194 kernel: audit: type=1334 audit(1696281708.769:84): prog-id=10 op=LOAD Oct 2 21:21:57.223203 kernel: audit: type=1334 audit(1696281708.769:85): prog-id=10 op=UNLOAD Oct 2 21:21:57.223211 kernel: audit: type=1334 audit(1696281708.784:86): prog-id=11 op=LOAD Oct 2 21:21:57.223219 kernel: audit: type=1334 audit(1696281708.784:87): prog-id=11 op=UNLOAD Oct 2 21:21:57.223228 systemd[1]: Populated /etc with preset unit settings. Oct 2 21:21:57.223237 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:21:57.223247 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:21:57.223258 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:21:57.223267 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 21:21:57.223276 kernel: audit: type=1334 audit(1696281716.366:88): prog-id=12 op=LOAD Oct 2 21:21:57.223285 systemd[1]: Stopped iscsid.service. Oct 2 21:21:57.223294 kernel: audit: type=1334 audit(1696281716.366:89): prog-id=3 op=UNLOAD Oct 2 21:21:57.223302 kernel: audit: type=1334 audit(1696281716.366:90): prog-id=13 op=LOAD Oct 2 21:21:57.223312 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 21:21:57.223320 kernel: audit: type=1334 audit(1696281716.366:91): prog-id=14 op=LOAD Oct 2 21:21:57.223329 kernel: audit: type=1334 audit(1696281716.366:92): prog-id=4 op=UNLOAD Oct 2 21:21:57.223337 kernel: audit: type=1334 audit(1696281716.366:93): prog-id=5 op=UNLOAD Oct 2 21:21:57.223345 kernel: audit: type=1334 audit(1696281716.367:94): prog-id=15 op=LOAD Oct 2 21:21:57.223356 kernel: audit: type=1334 audit(1696281716.367:95): prog-id=12 op=UNLOAD Oct 2 21:21:57.223365 systemd[1]: Stopped initrd-switch-root.service. Oct 2 21:21:57.223374 kernel: audit: type=1334 audit(1696281716.367:96): prog-id=16 op=LOAD Oct 2 21:21:57.223382 kernel: audit: type=1334 audit(1696281716.367:97): prog-id=17 op=LOAD Oct 2 21:21:57.223392 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 21:21:57.223402 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 21:21:57.223411 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 21:21:57.223420 systemd[1]: Created slice system-getty.slice. Oct 2 21:21:57.223429 systemd[1]: Created slice system-modprobe.slice. Oct 2 21:21:57.223438 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 21:21:57.223447 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 21:21:57.223456 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 21:21:57.223467 systemd[1]: Created slice user.slice. Oct 2 21:21:57.223477 systemd[1]: Started systemd-ask-password-console.path. Oct 2 21:21:57.223486 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 21:21:57.223496 systemd[1]: Set up automount boot.automount. Oct 2 21:21:57.223505 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 21:21:57.223514 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 21:21:57.223523 systemd[1]: Stopped target initrd-fs.target. Oct 2 21:21:57.223532 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 21:21:57.223541 systemd[1]: Reached target integritysetup.target. Oct 2 21:21:57.223552 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 21:21:57.223561 systemd[1]: Reached target remote-fs.target. Oct 2 21:21:57.223570 systemd[1]: Reached target slices.target. Oct 2 21:21:57.223579 systemd[1]: Reached target swap.target. Oct 2 21:21:57.223588 systemd[1]: Reached target torcx.target. Oct 2 21:21:57.223597 systemd[1]: Reached target veritysetup.target. Oct 2 21:21:57.223606 systemd[1]: Listening on systemd-coredump.socket. Oct 2 21:21:57.223626 systemd[1]: Listening on systemd-initctl.socket. Oct 2 21:21:57.223636 systemd[1]: Listening on systemd-networkd.socket. Oct 2 21:21:57.223645 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 21:21:57.223654 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 21:21:57.223664 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 21:21:57.223674 systemd[1]: Mounting dev-hugepages.mount... Oct 2 21:21:57.223685 systemd[1]: Mounting dev-mqueue.mount... Oct 2 21:21:57.223694 systemd[1]: Mounting media.mount... Oct 2 21:21:57.223703 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 21:21:57.223712 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 21:21:57.223722 systemd[1]: Mounting tmp.mount... Oct 2 21:21:57.223731 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 21:21:57.223740 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 21:21:57.223749 systemd[1]: Starting kmod-static-nodes.service... Oct 2 21:21:57.223758 systemd[1]: Starting modprobe@configfs.service... Oct 2 21:21:57.223769 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 21:21:57.223778 systemd[1]: Starting modprobe@drm.service... Oct 2 21:21:57.223787 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 21:21:57.223797 systemd[1]: Starting modprobe@fuse.service... Oct 2 21:21:57.223806 systemd[1]: Starting modprobe@loop.service... Oct 2 21:21:57.223816 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 21:21:57.223825 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 21:21:57.223834 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 21:21:57.223843 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 21:21:57.223854 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 21:21:57.223863 systemd[1]: Stopped systemd-journald.service. Oct 2 21:21:57.223876 kernel: fuse: init (API version 7.34) Oct 2 21:21:57.223885 systemd[1]: systemd-journald.service: Consumed 3.516s CPU time. Oct 2 21:21:57.223894 kernel: loop: module loaded Oct 2 21:21:57.223902 systemd[1]: Starting systemd-journald.service... Oct 2 21:21:57.223912 systemd[1]: Starting systemd-modules-load.service... Oct 2 21:21:57.223921 systemd[1]: Starting systemd-network-generator.service... Oct 2 21:21:57.223930 systemd[1]: Starting systemd-remount-fs.service... Oct 2 21:21:57.223941 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 21:21:57.223950 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 21:21:57.223960 systemd[1]: Stopped verity-setup.service. Oct 2 21:21:57.223969 systemd[1]: Mounted dev-hugepages.mount. Oct 2 21:21:57.223978 systemd[1]: Mounted dev-mqueue.mount. Oct 2 21:21:57.223987 systemd[1]: Mounted media.mount. Oct 2 21:21:57.223996 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 21:21:57.224005 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 21:21:57.224018 systemd-journald[1170]: Journal started Oct 2 21:21:57.224056 systemd-journald[1170]: Runtime Journal (/run/log/journal/c606cb6e9d6e4695842467e2cd3e98af) is 8.0M, max 78.6M, 70.6M free. Oct 2 21:21:47.762000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 21:21:48.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 21:21:48.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 21:21:48.769000 audit: BPF prog-id=10 op=LOAD Oct 2 21:21:48.769000 audit: BPF prog-id=10 op=UNLOAD Oct 2 21:21:48.784000 audit: BPF prog-id=11 op=LOAD Oct 2 21:21:48.784000 audit: BPF prog-id=11 op=UNLOAD Oct 2 21:21:56.366000 audit: BPF prog-id=12 op=LOAD Oct 2 21:21:56.366000 audit: BPF prog-id=3 op=UNLOAD Oct 2 21:21:56.366000 audit: BPF prog-id=13 op=LOAD Oct 2 21:21:56.366000 audit: BPF prog-id=14 op=LOAD Oct 2 21:21:56.366000 audit: BPF prog-id=4 op=UNLOAD Oct 2 21:21:56.366000 audit: BPF prog-id=5 op=UNLOAD Oct 2 21:21:56.367000 audit: BPF prog-id=15 op=LOAD Oct 2 21:21:56.367000 audit: BPF prog-id=12 op=UNLOAD Oct 2 21:21:56.367000 audit: BPF prog-id=16 op=LOAD Oct 2 21:21:56.367000 audit: BPF prog-id=17 op=LOAD Oct 2 21:21:56.367000 audit: BPF prog-id=13 op=UNLOAD Oct 2 21:21:56.367000 audit: BPF prog-id=14 op=UNLOAD Oct 2 21:21:56.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:56.390000 audit: BPF prog-id=15 op=UNLOAD Oct 2 21:21:56.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:56.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:56.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.015000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.032000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.046000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.057000 audit: BPF prog-id=18 op=LOAD Oct 2 21:21:57.058000 audit: BPF prog-id=19 op=LOAD Oct 2 21:21:57.058000 audit: BPF prog-id=20 op=LOAD Oct 2 21:21:57.058000 audit: BPF prog-id=16 op=UNLOAD Oct 2 21:21:57.058000 audit: BPF prog-id=17 op=UNLOAD Oct 2 21:21:57.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.220000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 21:21:57.220000 audit[1170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=fffff1efaee0 a2=4000 a3=1 items=0 ppid=1 pid=1170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:21:57.220000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 21:21:56.365062 systemd[1]: Queued start job for default target multi-user.target. Oct 2 21:21:49.995084 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:49Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:21:56.368341 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 21:21:50.039390 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:50Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 21:21:56.368712 systemd[1]: systemd-journald.service: Consumed 3.516s CPU time. Oct 2 21:21:50.039413 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:50Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 21:21:50.039463 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:50Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 21:21:50.039473 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:50Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 21:21:50.039506 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:50Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 21:21:50.039529 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:50Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 21:21:50.039775 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:50Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 21:21:50.039810 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:50Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 21:21:50.039831 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:50Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 21:21:50.040196 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:50Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 21:21:50.040239 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:50Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 21:21:50.040257 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:50Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 21:21:50.040271 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:50Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 21:21:50.040287 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:50Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 21:21:50.040310 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:50Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 21:21:55.451826 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:55Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:21:55.452098 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:55Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:21:55.452201 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:55Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:21:55.452353 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:55Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:21:55.452404 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:55Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 21:21:55.452466 /usr/lib/systemd/system-generators/torcx-generator[1076]: time="2023-10-02T21:21:55Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 21:21:57.237726 systemd[1]: Started systemd-journald.service. Oct 2 21:21:57.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.249424 systemd[1]: Mounted tmp.mount. Oct 2 21:21:57.253641 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 21:21:57.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.258757 systemd[1]: Finished kmod-static-nodes.service. Oct 2 21:21:57.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.263825 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 21:21:57.263956 systemd[1]: Finished modprobe@configfs.service. Oct 2 21:21:57.268000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.268000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.269404 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 21:21:57.269544 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 21:21:57.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.273000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.274721 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 21:21:57.274840 systemd[1]: Finished modprobe@drm.service. Oct 2 21:21:57.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.279000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.279728 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 21:21:57.279856 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 21:21:57.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.286874 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 21:21:57.287024 systemd[1]: Finished modprobe@fuse.service. Oct 2 21:21:57.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.294903 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 21:21:57.295035 systemd[1]: Finished modprobe@loop.service. Oct 2 21:21:57.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.302000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.303011 systemd[1]: Finished systemd-modules-load.service. Oct 2 21:21:57.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.313355 systemd[1]: Finished systemd-network-generator.service. Oct 2 21:21:57.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.321050 systemd[1]: Finished systemd-remount-fs.service. Oct 2 21:21:57.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.326643 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 21:21:57.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.332662 systemd[1]: Reached target network-pre.target. Oct 2 21:21:57.339140 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 21:21:57.345019 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 21:21:57.349588 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 21:21:57.392941 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 21:21:57.404035 systemd[1]: Starting systemd-journal-flush.service... Oct 2 21:21:57.413392 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 21:21:57.414902 systemd[1]: Starting systemd-random-seed.service... Oct 2 21:21:57.419426 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 21:21:57.420534 systemd[1]: Starting systemd-sysctl.service... Oct 2 21:21:57.426591 systemd[1]: Starting systemd-sysusers.service... Oct 2 21:21:57.432212 systemd[1]: Starting systemd-udev-settle.service... Oct 2 21:21:57.438931 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 21:21:57.445367 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 21:21:57.454934 udevadm[1196]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 21:21:57.474632 systemd[1]: Finished systemd-random-seed.service. Oct 2 21:21:57.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.480107 systemd[1]: Reached target first-boot-complete.target. Oct 2 21:21:57.489667 systemd-journald[1170]: Time spent on flushing to /var/log/journal/c606cb6e9d6e4695842467e2cd3e98af is 16.588ms for 1130 entries. Oct 2 21:21:57.489667 systemd-journald[1170]: System Journal (/var/log/journal/c606cb6e9d6e4695842467e2cd3e98af) is 8.0M, max 2.6G, 2.6G free. Oct 2 21:21:57.561029 systemd-journald[1170]: Received client request to flush runtime journal. Oct 2 21:21:57.562511 systemd[1]: Finished systemd-journal-flush.service. Oct 2 21:21:57.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:57.604892 systemd[1]: Finished systemd-sysctl.service. Oct 2 21:21:57.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:58.109323 systemd[1]: Finished systemd-sysusers.service. Oct 2 21:21:58.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:58.115641 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 21:21:58.467863 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 21:21:58.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:58.602522 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 21:21:58.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:58.610000 audit: BPF prog-id=21 op=LOAD Oct 2 21:21:58.610000 audit: BPF prog-id=22 op=LOAD Oct 2 21:21:58.610000 audit: BPF prog-id=7 op=UNLOAD Oct 2 21:21:58.610000 audit: BPF prog-id=8 op=UNLOAD Oct 2 21:21:58.612304 systemd[1]: Starting systemd-udevd.service... Oct 2 21:21:58.634529 systemd-udevd[1201]: Using default interface naming scheme 'v252'. Oct 2 21:21:58.752528 systemd[1]: Started systemd-udevd.service. Oct 2 21:21:58.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:58.763000 audit: BPF prog-id=23 op=LOAD Oct 2 21:21:58.764936 systemd[1]: Starting systemd-networkd.service... Oct 2 21:21:58.819858 systemd[1]: Starting systemd-userdbd.service... Oct 2 21:21:58.818000 audit: BPF prog-id=24 op=LOAD Oct 2 21:21:58.818000 audit: BPF prog-id=25 op=LOAD Oct 2 21:21:58.818000 audit: BPF prog-id=26 op=LOAD Oct 2 21:21:58.826420 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 21:21:58.903000 audit[1215]: AVC avc: denied { confidentiality } for pid=1215 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 21:21:58.914599 systemd[1]: Started systemd-userdbd.service. Oct 2 21:21:58.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:58.952967 kernel: hv_vmbus: registering driver hv_balloon Oct 2 21:21:58.953072 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 21:21:58.953096 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 21:21:58.953114 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 21:21:58.953131 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 21:21:58.953149 kernel: hv_balloon: Memory hot add disabled on ARM64 Oct 2 21:21:58.953163 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 21:21:58.963068 kernel: Console: switching to colour dummy device 80x25 Oct 2 21:21:58.973317 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 21:21:58.903000 audit[1215]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaab01316710 a1=aa2c a2=ffffb38c24b0 a3=aaab01271010 items=10 ppid=1201 pid=1215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:21:58.903000 audit: CWD cwd="/" Oct 2 21:21:58.903000 audit: PATH item=0 name=(null) inode=10532 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:58.903000 audit: PATH item=1 name=(null) inode=10533 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:58.903000 audit: PATH item=2 name=(null) inode=10532 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:58.903000 audit: PATH item=3 name=(null) inode=10534 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:58.903000 audit: PATH item=4 name=(null) inode=10532 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:58.903000 audit: PATH item=5 name=(null) inode=10535 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:58.903000 audit: PATH item=6 name=(null) inode=10532 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:58.903000 audit: PATH item=7 name=(null) inode=10536 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:58.903000 audit: PATH item=8 name=(null) inode=10532 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:58.903000 audit: PATH item=9 name=(null) inode=10537 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:21:58.903000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 21:21:59.014580 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 21:21:59.014697 kernel: hv_vmbus: registering driver hv_utils Oct 2 21:21:59.026298 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 21:21:59.026393 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 21:21:59.026412 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 21:21:59.561257 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1202) Oct 2 21:21:59.598052 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 21:21:59.607740 systemd[1]: Finished systemd-udev-settle.service. Oct 2 21:21:59.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:59.622769 systemd[1]: Starting lvm2-activation-early.service... Oct 2 21:21:59.834570 systemd-networkd[1222]: lo: Link UP Oct 2 21:21:59.834852 systemd-networkd[1222]: lo: Gained carrier Oct 2 21:21:59.835358 systemd-networkd[1222]: Enumeration completed Oct 2 21:21:59.835562 systemd[1]: Started systemd-networkd.service. Oct 2 21:21:59.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:59.841749 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 21:21:59.864437 systemd-networkd[1222]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 21:21:59.921275 kernel: mlx5_core 4558:00:02.0 enP17752s1: Link up Oct 2 21:21:59.923531 lvm[1277]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 21:21:59.963267 kernel: hv_netvsc 000d3ac5-27de-000d-3ac5-27de000d3ac5 eth0: Data path switched to VF: enP17752s1 Oct 2 21:21:59.964113 systemd-networkd[1222]: enP17752s1: Link UP Oct 2 21:21:59.964326 systemd-networkd[1222]: eth0: Link UP Oct 2 21:21:59.964400 systemd-networkd[1222]: eth0: Gained carrier Oct 2 21:21:59.968304 systemd[1]: Finished lvm2-activation-early.service. Oct 2 21:21:59.969630 systemd-networkd[1222]: enP17752s1: Gained carrier Oct 2 21:21:59.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:21:59.973281 systemd[1]: Reached target cryptsetup.target. Oct 2 21:21:59.979437 systemd[1]: Starting lvm2-activation.service... Oct 2 21:21:59.984411 systemd-networkd[1222]: eth0: DHCPv4 address 10.200.20.19/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 21:21:59.987096 lvm[1280]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 21:22:00.010814 systemd[1]: Finished lvm2-activation.service. Oct 2 21:22:00.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:00.020585 systemd[1]: Reached target local-fs-pre.target. Oct 2 21:22:00.030013 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 21:22:00.030059 systemd[1]: Reached target local-fs.target. Oct 2 21:22:00.035011 systemd[1]: Reached target machines.target. Oct 2 21:22:00.040745 systemd[1]: Starting ldconfig.service... Oct 2 21:22:00.044745 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 21:22:00.044816 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 21:22:00.045923 systemd[1]: Starting systemd-boot-update.service... Oct 2 21:22:00.051697 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 21:22:00.059260 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 21:22:00.064552 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 21:22:00.064616 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 21:22:00.065791 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 21:22:00.081320 systemd-tmpfiles[1285]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 21:22:00.115058 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1282 (bootctl) Oct 2 21:22:00.117218 systemd-tmpfiles[1285]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 21:22:00.119041 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 21:22:00.315657 systemd-tmpfiles[1285]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 21:22:00.369725 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 21:22:00.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:00.921359 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 21:22:00.922932 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 21:22:00.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:00.964256 systemd-fsck[1290]: fsck.fat 4.2 (2021-01-31) Oct 2 21:22:00.964256 systemd-fsck[1290]: /dev/sda1: 236 files, 113463/258078 clusters Oct 2 21:22:00.968609 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 21:22:00.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:00.976423 systemd[1]: Mounting boot.mount... Oct 2 21:22:00.987938 systemd[1]: Mounted boot.mount. Oct 2 21:22:00.991774 systemd-networkd[1222]: eth0: Gained IPv6LL Oct 2 21:22:00.997700 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 21:22:01.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:01.018194 systemd[1]: Finished systemd-boot-update.service. Oct 2 21:22:01.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:02.060369 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 21:22:02.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:02.069793 kernel: kauditd_printk_skb: 78 callbacks suppressed Oct 2 21:22:02.069855 kernel: audit: type=1130 audit(1696281722.064:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:02.071149 systemd[1]: Starting audit-rules.service... Oct 2 21:22:02.092648 systemd[1]: Starting clean-ca-certificates.service... Oct 2 21:22:02.098950 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 21:22:02.107000 audit: BPF prog-id=27 op=LOAD Oct 2 21:22:02.110502 systemd[1]: Starting systemd-resolved.service... Oct 2 21:22:02.126253 kernel: audit: type=1334 audit(1696281722.107:162): prog-id=27 op=LOAD Oct 2 21:22:02.128000 audit: BPF prog-id=28 op=LOAD Oct 2 21:22:02.131201 systemd[1]: Starting systemd-timesyncd.service... Oct 2 21:22:02.139333 kernel: audit: type=1334 audit(1696281722.128:163): prog-id=28 op=LOAD Oct 2 21:22:02.144465 systemd[1]: Starting systemd-update-utmp.service... Oct 2 21:22:02.168571 systemd[1]: Finished clean-ca-certificates.service. Oct 2 21:22:02.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:02.173778 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 21:22:02.199264 kernel: audit: type=1130 audit(1696281722.172:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:02.230781 kernel: audit: type=1127 audit(1696281722.198:165): pid=1304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 21:22:02.198000 audit[1304]: SYSTEM_BOOT pid=1304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 21:22:02.229211 systemd[1]: Finished systemd-update-utmp.service. Oct 2 21:22:02.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:02.256293 kernel: audit: type=1130 audit(1696281722.233:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:02.282988 systemd[1]: Started systemd-timesyncd.service. Oct 2 21:22:02.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:02.287856 systemd[1]: Reached target time-set.target. Oct 2 21:22:02.319544 kernel: audit: type=1130 audit(1696281722.286:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:02.328775 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 21:22:02.333000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:02.355301 kernel: audit: type=1130 audit(1696281722.333:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:02.405496 systemd-resolved[1300]: Positive Trust Anchors: Oct 2 21:22:02.405523 systemd-resolved[1300]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 21:22:02.405550 systemd-resolved[1300]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 21:22:02.490194 systemd-resolved[1300]: Using system hostname 'ci-3510.3.0-a-74bdccafa3'. Oct 2 21:22:02.492057 systemd[1]: Started systemd-resolved.service. Oct 2 21:22:02.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:02.497003 systemd[1]: Reached target network.target. Oct 2 21:22:02.523868 kernel: audit: type=1130 audit(1696281722.495:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:02.524694 systemd[1]: Reached target network-online.target. Oct 2 21:22:02.534667 systemd[1]: Reached target nss-lookup.target. Oct 2 21:22:02.546000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 21:22:02.560896 augenrules[1317]: No rules Oct 2 21:22:02.546000 audit[1317]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff69b8250 a2=420 a3=0 items=0 ppid=1296 pid=1317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:02.561278 kernel: audit: type=1305 audit(1696281722.546:170): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 21:22:02.546000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 21:22:02.561878 systemd[1]: Finished audit-rules.service. Oct 2 21:22:02.571911 systemd-timesyncd[1301]: Contacted time server 142.202.190.19:123 (0.flatcar.pool.ntp.org). Oct 2 21:22:02.571975 systemd-timesyncd[1301]: Initial clock synchronization to Mon 2023-10-02 21:22:02.571789 UTC. Oct 2 21:22:08.803811 ldconfig[1281]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 21:22:08.812024 systemd[1]: Finished ldconfig.service. Oct 2 21:22:08.826197 systemd[1]: Starting systemd-update-done.service... Oct 2 21:22:08.852683 systemd[1]: Finished systemd-update-done.service. Oct 2 21:22:08.857599 systemd[1]: Reached target sysinit.target. Oct 2 21:22:08.861816 systemd[1]: Started motdgen.path. Oct 2 21:22:08.865598 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 21:22:08.871598 systemd[1]: Started logrotate.timer. Oct 2 21:22:08.875803 systemd[1]: Started mdadm.timer. Oct 2 21:22:08.879460 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 21:22:08.883991 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 21:22:08.884021 systemd[1]: Reached target paths.target. Oct 2 21:22:08.888211 systemd[1]: Reached target timers.target. Oct 2 21:22:08.892821 systemd[1]: Listening on dbus.socket. Oct 2 21:22:08.897875 systemd[1]: Starting docker.socket... Oct 2 21:22:08.913687 systemd[1]: Listening on sshd.socket. Oct 2 21:22:08.923646 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 21:22:08.924783 systemd[1]: Listening on docker.socket. Oct 2 21:22:08.931363 systemd[1]: Reached target sockets.target. Oct 2 21:22:08.936343 systemd[1]: Reached target basic.target. Oct 2 21:22:08.940474 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 21:22:08.940503 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 21:22:08.941680 systemd[1]: Starting containerd.service... Oct 2 21:22:08.946313 systemd[1]: Starting dbus.service... Oct 2 21:22:08.950592 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 21:22:08.955763 systemd[1]: Starting extend-filesystems.service... Oct 2 21:22:08.963406 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 21:22:08.964419 systemd[1]: Starting motdgen.service... Oct 2 21:22:08.969767 systemd[1]: Started nvidia.service. Oct 2 21:22:08.975042 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 21:22:08.980291 systemd[1]: Starting prepare-critools.service... Oct 2 21:22:08.985323 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 21:22:08.990480 systemd[1]: Starting sshd-keygen.service... Oct 2 21:22:08.997060 systemd[1]: Starting systemd-logind.service... Oct 2 21:22:09.005966 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 21:22:09.006108 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 21:22:09.006811 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 21:22:09.007853 systemd[1]: Starting update-engine.service... Oct 2 21:22:09.020435 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 21:22:09.035889 jq[1327]: false Oct 2 21:22:09.038845 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 21:22:09.039019 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 21:22:09.050719 jq[1342]: true Oct 2 21:22:09.070421 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 21:22:09.070587 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 21:22:09.073018 extend-filesystems[1328]: Found sda Oct 2 21:22:09.077035 extend-filesystems[1328]: Found sda1 Oct 2 21:22:09.077035 extend-filesystems[1328]: Found sda2 Oct 2 21:22:09.077035 extend-filesystems[1328]: Found sda3 Oct 2 21:22:09.077035 extend-filesystems[1328]: Found usr Oct 2 21:22:09.077035 extend-filesystems[1328]: Found sda4 Oct 2 21:22:09.077035 extend-filesystems[1328]: Found sda6 Oct 2 21:22:09.077035 extend-filesystems[1328]: Found sda7 Oct 2 21:22:09.077035 extend-filesystems[1328]: Found sda9 Oct 2 21:22:09.077035 extend-filesystems[1328]: Checking size of /dev/sda9 Oct 2 21:22:09.142202 jq[1350]: true Oct 2 21:22:09.149479 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 21:22:09.149635 systemd[1]: Finished motdgen.service. Oct 2 21:22:09.167597 systemd-logind[1338]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 21:22:09.171144 systemd-logind[1338]: New seat seat0. Oct 2 21:22:09.244371 tar[1344]: ./ Oct 2 21:22:09.244371 tar[1344]: ./loopback Oct 2 21:22:09.248327 extend-filesystems[1328]: Old size kept for /dev/sda9 Oct 2 21:22:09.266319 extend-filesystems[1328]: Found sr0 Oct 2 21:22:09.260620 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 21:22:09.278473 env[1353]: time="2023-10-02T21:22:09.272207405Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 21:22:09.278659 tar[1345]: crictl Oct 2 21:22:09.260773 systemd[1]: Finished extend-filesystems.service. Oct 2 21:22:09.288331 bash[1375]: Updated "/home/core/.ssh/authorized_keys" Oct 2 21:22:09.288962 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 21:22:09.332398 tar[1344]: ./bandwidth Oct 2 21:22:09.358392 env[1353]: time="2023-10-02T21:22:09.358348930Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 21:22:09.359428 env[1353]: time="2023-10-02T21:22:09.359404729Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:22:09.366189 env[1353]: time="2023-10-02T21:22:09.366155923Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 21:22:09.368292 env[1353]: time="2023-10-02T21:22:09.368266921Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:22:09.368630 env[1353]: time="2023-10-02T21:22:09.368607081Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 21:22:09.371899 env[1353]: time="2023-10-02T21:22:09.371875998Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 21:22:09.372019 env[1353]: time="2023-10-02T21:22:09.372002518Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 21:22:09.372094 env[1353]: time="2023-10-02T21:22:09.372080678Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 21:22:09.372313 env[1353]: time="2023-10-02T21:22:09.372295878Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:22:09.372915 env[1353]: time="2023-10-02T21:22:09.372887797Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:22:09.373171 env[1353]: time="2023-10-02T21:22:09.373150237Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 21:22:09.375280 env[1353]: time="2023-10-02T21:22:09.375261435Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 21:22:09.375447 env[1353]: time="2023-10-02T21:22:09.375415035Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 21:22:09.375545 env[1353]: time="2023-10-02T21:22:09.375531435Z" level=info msg="metadata content store policy set" policy=shared Oct 2 21:22:09.377659 dbus-daemon[1326]: [system] SELinux support is enabled Oct 2 21:22:09.377821 systemd[1]: Started dbus.service. Oct 2 21:22:09.383961 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 21:22:09.384276 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 21:22:09.384297 systemd[1]: Reached target system-config.target. Oct 2 21:22:09.392062 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 21:22:09.392083 systemd[1]: Reached target user-config.target. Oct 2 21:22:09.401396 systemd[1]: Started systemd-logind.service. Oct 2 21:22:09.409578 env[1353]: time="2023-10-02T21:22:09.409543325Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 21:22:09.409682 env[1353]: time="2023-10-02T21:22:09.409669165Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 21:22:09.409759 env[1353]: time="2023-10-02T21:22:09.409745485Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 21:22:09.409854 env[1353]: time="2023-10-02T21:22:09.409838445Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 21:22:09.409928 env[1353]: time="2023-10-02T21:22:09.409913685Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 21:22:09.410011 env[1353]: time="2023-10-02T21:22:09.409995845Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 21:22:09.410090 env[1353]: time="2023-10-02T21:22:09.410077325Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 21:22:09.410675 env[1353]: time="2023-10-02T21:22:09.410648764Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 21:22:09.410793 env[1353]: time="2023-10-02T21:22:09.410777084Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 21:22:09.410860 env[1353]: time="2023-10-02T21:22:09.410847644Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 21:22:09.410930 env[1353]: time="2023-10-02T21:22:09.410916324Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 21:22:09.410996 env[1353]: time="2023-10-02T21:22:09.410983004Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 21:22:09.411187 env[1353]: time="2023-10-02T21:22:09.411169404Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 21:22:09.411367 env[1353]: time="2023-10-02T21:22:09.411349924Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 21:22:09.412359 env[1353]: time="2023-10-02T21:22:09.411776043Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 21:22:09.412560 env[1353]: time="2023-10-02T21:22:09.412539923Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 21:22:09.412635 env[1353]: time="2023-10-02T21:22:09.412620763Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 21:22:09.412774 env[1353]: time="2023-10-02T21:22:09.412758203Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 21:22:09.412842 env[1353]: time="2023-10-02T21:22:09.412829843Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 21:22:09.412900 env[1353]: time="2023-10-02T21:22:09.412887762Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 21:22:09.412955 env[1353]: time="2023-10-02T21:22:09.412942802Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 21:22:09.413024 env[1353]: time="2023-10-02T21:22:09.413011122Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 21:22:09.413095 env[1353]: time="2023-10-02T21:22:09.413077602Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 21:22:09.413149 env[1353]: time="2023-10-02T21:22:09.413136522Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 21:22:09.413205 env[1353]: time="2023-10-02T21:22:09.413192162Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 21:22:09.413310 env[1353]: time="2023-10-02T21:22:09.413295562Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 21:22:09.413503 env[1353]: time="2023-10-02T21:22:09.413484322Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 21:22:09.413577 env[1353]: time="2023-10-02T21:22:09.413564202Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 21:22:09.413641 env[1353]: time="2023-10-02T21:22:09.413628402Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 21:22:09.413704 env[1353]: time="2023-10-02T21:22:09.413691202Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 21:22:09.413768 env[1353]: time="2023-10-02T21:22:09.413752402Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 21:22:09.413826 env[1353]: time="2023-10-02T21:22:09.413813602Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 21:22:09.413897 env[1353]: time="2023-10-02T21:22:09.413882602Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 21:22:09.413982 env[1353]: time="2023-10-02T21:22:09.413968362Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 21:22:09.414305 env[1353]: time="2023-10-02T21:22:09.414249921Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 21:22:09.430416 env[1353]: time="2023-10-02T21:22:09.417290759Z" level=info msg="Connect containerd service" Oct 2 21:22:09.430416 env[1353]: time="2023-10-02T21:22:09.417337399Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 21:22:09.430416 env[1353]: time="2023-10-02T21:22:09.422344554Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 21:22:09.430416 env[1353]: time="2023-10-02T21:22:09.422658394Z" level=info msg="Start subscribing containerd event" Oct 2 21:22:09.430416 env[1353]: time="2023-10-02T21:22:09.422707914Z" level=info msg="Start recovering state" Oct 2 21:22:09.430416 env[1353]: time="2023-10-02T21:22:09.422713114Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 21:22:09.430416 env[1353]: time="2023-10-02T21:22:09.422753554Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 21:22:09.430416 env[1353]: time="2023-10-02T21:22:09.422770394Z" level=info msg="Start event monitor" Oct 2 21:22:09.430416 env[1353]: time="2023-10-02T21:22:09.422835634Z" level=info msg="Start snapshots syncer" Oct 2 21:22:09.430416 env[1353]: time="2023-10-02T21:22:09.422848634Z" level=info msg="Start cni network conf syncer for default" Oct 2 21:22:09.430416 env[1353]: time="2023-10-02T21:22:09.422858394Z" level=info msg="Start streaming server" Oct 2 21:22:09.422874 systemd[1]: Started containerd.service. Oct 2 21:22:09.435459 env[1353]: time="2023-10-02T21:22:09.435396943Z" level=info msg="containerd successfully booted in 0.210760s" Oct 2 21:22:09.460533 tar[1344]: ./ptp Oct 2 21:22:09.553856 tar[1344]: ./vlan Oct 2 21:22:09.621468 tar[1344]: ./host-device Oct 2 21:22:09.683566 tar[1344]: ./tuning Oct 2 21:22:09.739053 tar[1344]: ./vrf Oct 2 21:22:09.774706 tar[1344]: ./sbr Oct 2 21:22:09.808678 tar[1344]: ./tap Oct 2 21:22:09.879835 tar[1344]: ./dhcp Oct 2 21:22:09.916068 update_engine[1340]: I1002 21:22:09.899814 1340 main.cc:92] Flatcar Update Engine starting Oct 2 21:22:09.920656 systemd[1]: Finished prepare-critools.service. Oct 2 21:22:09.971059 systemd[1]: Started update-engine.service. Oct 2 21:22:09.977363 tar[1344]: ./static Oct 2 21:22:09.977401 update_engine[1340]: I1002 21:22:09.971112 1340 update_check_scheduler.cc:74] Next update check in 6m16s Oct 2 21:22:09.979503 systemd[1]: Started locksmithd.service. Oct 2 21:22:10.002512 tar[1344]: ./firewall Oct 2 21:22:10.039660 tar[1344]: ./macvlan Oct 2 21:22:10.073943 tar[1344]: ./dummy Oct 2 21:22:10.107140 tar[1344]: ./bridge Oct 2 21:22:10.143736 tar[1344]: ./ipvlan Oct 2 21:22:10.176566 tar[1344]: ./portmap Oct 2 21:22:10.208090 tar[1344]: ./host-local Oct 2 21:22:10.294922 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 21:22:11.351975 sshd_keygen[1349]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 21:22:11.378898 systemd[1]: Finished sshd-keygen.service. Oct 2 21:22:11.385517 systemd[1]: Starting issuegen.service... Oct 2 21:22:11.390547 systemd[1]: Started waagent.service. Oct 2 21:22:11.397841 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 21:22:11.397993 systemd[1]: Finished issuegen.service. Oct 2 21:22:11.411661 systemd[1]: Starting systemd-user-sessions.service... Oct 2 21:22:11.444854 systemd[1]: Finished systemd-user-sessions.service. Oct 2 21:22:11.451484 systemd[1]: Started getty@tty1.service. Oct 2 21:22:11.457200 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 21:22:11.462326 systemd[1]: Reached target getty.target. Oct 2 21:22:11.469780 systemd[1]: Reached target multi-user.target. Oct 2 21:22:11.475777 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 21:22:11.490729 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 21:22:11.490883 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 21:22:11.496490 systemd[1]: Startup finished in 803ms (kernel) + 18.531s (initrd) + 24.097s (userspace) = 43.432s. Oct 2 21:22:11.658775 locksmithd[1434]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 21:22:12.079735 login[1454]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Oct 2 21:22:12.081571 login[1455]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 21:22:12.123602 systemd[1]: Created slice user-500.slice. Oct 2 21:22:12.125253 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 21:22:12.129181 systemd-logind[1338]: New session 1 of user core. Oct 2 21:22:12.183121 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 21:22:12.184657 systemd[1]: Starting user@500.service... Oct 2 21:22:12.222485 (systemd)[1458]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:22:12.493745 systemd[1458]: Queued start job for default target default.target. Oct 2 21:22:12.494718 systemd[1458]: Reached target paths.target. Oct 2 21:22:12.494748 systemd[1458]: Reached target sockets.target. Oct 2 21:22:12.494760 systemd[1458]: Reached target timers.target. Oct 2 21:22:12.494770 systemd[1458]: Reached target basic.target. Oct 2 21:22:12.494820 systemd[1458]: Reached target default.target. Oct 2 21:22:12.494844 systemd[1458]: Startup finished in 258ms. Oct 2 21:22:12.494893 systemd[1]: Started user@500.service. Oct 2 21:22:12.495883 systemd[1]: Started session-1.scope. Oct 2 21:22:13.080055 login[1454]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 21:22:13.083708 systemd-logind[1338]: New session 2 of user core. Oct 2 21:22:13.084521 systemd[1]: Started session-2.scope. Oct 2 21:22:17.477289 waagent[1449]: 2023-10-02T21:22:17.477158Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 21:22:17.484576 waagent[1449]: 2023-10-02T21:22:17.484494Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 21:22:17.489359 waagent[1449]: 2023-10-02T21:22:17.489294Z INFO Daemon Daemon Python: 3.9.16 Oct 2 21:22:17.494120 waagent[1449]: 2023-10-02T21:22:17.494024Z INFO Daemon Daemon Run daemon Oct 2 21:22:17.498701 waagent[1449]: 2023-10-02T21:22:17.498640Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 21:22:17.535194 waagent[1449]: 2023-10-02T21:22:17.535058Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 21:22:17.551130 waagent[1449]: 2023-10-02T21:22:17.550999Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 21:22:17.561239 waagent[1449]: 2023-10-02T21:22:17.561149Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 21:22:17.566468 waagent[1449]: 2023-10-02T21:22:17.566403Z INFO Daemon Daemon Using waagent for provisioning Oct 2 21:22:17.572421 waagent[1449]: 2023-10-02T21:22:17.572360Z INFO Daemon Daemon Activate resource disk Oct 2 21:22:17.577308 waagent[1449]: 2023-10-02T21:22:17.577248Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 21:22:17.591810 waagent[1449]: 2023-10-02T21:22:17.591745Z INFO Daemon Daemon Found device: None Oct 2 21:22:17.596486 waagent[1449]: 2023-10-02T21:22:17.596425Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 21:22:17.609920 waagent[1449]: 2023-10-02T21:22:17.609829Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 21:22:17.633046 waagent[1449]: 2023-10-02T21:22:17.632970Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 21:22:17.639589 waagent[1449]: 2023-10-02T21:22:17.639513Z INFO Daemon Daemon Running default provisioning handler Oct 2 21:22:17.656143 waagent[1449]: 2023-10-02T21:22:17.656014Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 21:22:17.671535 waagent[1449]: 2023-10-02T21:22:17.671409Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 21:22:17.681357 waagent[1449]: 2023-10-02T21:22:17.681286Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 21:22:17.686746 waagent[1449]: 2023-10-02T21:22:17.686674Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 21:22:17.738641 waagent[1449]: 2023-10-02T21:22:17.738421Z INFO Daemon Daemon Successfully mounted dvd Oct 2 21:22:17.875991 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 21:22:17.943212 waagent[1449]: 2023-10-02T21:22:17.943077Z INFO Daemon Daemon Detect protocol endpoint Oct 2 21:22:17.948442 waagent[1449]: 2023-10-02T21:22:17.948370Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 21:22:17.954673 waagent[1449]: 2023-10-02T21:22:17.954603Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 21:22:17.961541 waagent[1449]: 2023-10-02T21:22:17.961478Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 21:22:17.967186 waagent[1449]: 2023-10-02T21:22:17.967124Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 21:22:17.972460 waagent[1449]: 2023-10-02T21:22:17.972401Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 21:22:18.196656 waagent[1449]: 2023-10-02T21:22:18.196590Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 21:22:18.205950 waagent[1449]: 2023-10-02T21:22:18.205886Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 21:22:18.218123 waagent[1449]: 2023-10-02T21:22:18.218032Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 21:22:19.297284 waagent[1449]: 2023-10-02T21:22:19.297115Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 21:22:19.319263 waagent[1449]: 2023-10-02T21:22:19.319154Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 21:22:19.330262 waagent[1449]: 2023-10-02T21:22:19.330170Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 21:22:19.434156 waagent[1449]: 2023-10-02T21:22:19.434024Z INFO Daemon Daemon Found private key matching thumbprint 2B12E5E73AA74E658887ACBB94FD37D164912CAF Oct 2 21:22:19.443439 waagent[1449]: 2023-10-02T21:22:19.443357Z INFO Daemon Daemon Certificate with thumbprint 84EA9C4588B4C33C626D2CDD28D094593DE72975 has no matching private key. Oct 2 21:22:19.453323 waagent[1449]: 2023-10-02T21:22:19.453222Z INFO Daemon Daemon Fetch goal state completed Oct 2 21:22:19.471408 waagent[1449]: 2023-10-02T21:22:19.471359Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: e29c408b-d1cc-4729-a477-56ff3094ea90 New eTag: 9681240863052338411] Oct 2 21:22:19.482157 waagent[1449]: 2023-10-02T21:22:19.482095Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 21:22:19.497595 waagent[1449]: 2023-10-02T21:22:19.497537Z INFO Daemon Daemon Starting provisioning Oct 2 21:22:19.506917 waagent[1449]: 2023-10-02T21:22:19.506820Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 21:22:19.517180 waagent[1449]: 2023-10-02T21:22:19.517087Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-74bdccafa3] Oct 2 21:22:19.583430 waagent[1449]: 2023-10-02T21:22:19.583301Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-74bdccafa3] Oct 2 21:22:19.590161 waagent[1449]: 2023-10-02T21:22:19.590094Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 21:22:19.598206 waagent[1449]: 2023-10-02T21:22:19.598131Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 21:22:19.634650 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 21:22:19.634820 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 21:22:19.634894 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 21:22:19.635124 systemd[1]: Stopping systemd-networkd.service... Oct 2 21:22:19.640282 systemd-networkd[1222]: eth0: DHCPv6 lease lost Oct 2 21:22:19.642196 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 21:22:19.642387 systemd[1]: Stopped systemd-networkd.service. Oct 2 21:22:19.644738 systemd[1]: Starting systemd-networkd.service... Oct 2 21:22:19.676971 systemd-networkd[1504]: enP17752s1: Link UP Oct 2 21:22:19.676982 systemd-networkd[1504]: enP17752s1: Gained carrier Oct 2 21:22:19.677849 systemd-networkd[1504]: eth0: Link UP Oct 2 21:22:19.677861 systemd-networkd[1504]: eth0: Gained carrier Oct 2 21:22:19.678166 systemd-networkd[1504]: lo: Link UP Oct 2 21:22:19.678175 systemd-networkd[1504]: lo: Gained carrier Oct 2 21:22:19.678581 systemd-networkd[1504]: eth0: Gained IPv6LL Oct 2 21:22:19.679499 systemd-networkd[1504]: Enumeration completed Oct 2 21:22:19.679611 systemd[1]: Started systemd-networkd.service. Oct 2 21:22:19.685448 waagent[1449]: 2023-10-02T21:22:19.681740Z INFO Daemon Daemon Create user account if not exists Oct 2 21:22:19.681281 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 21:22:19.688468 waagent[1449]: 2023-10-02T21:22:19.688382Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 21:22:19.694777 systemd-networkd[1504]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 21:22:19.695614 waagent[1449]: 2023-10-02T21:22:19.695534Z INFO Daemon Daemon Configure sudoer Oct 2 21:22:19.700807 waagent[1449]: 2023-10-02T21:22:19.700739Z INFO Daemon Daemon Configure sshd Oct 2 21:22:19.708997 waagent[1449]: 2023-10-02T21:22:19.708875Z INFO Daemon Daemon Deploy ssh public key. Oct 2 21:22:19.727431 systemd-networkd[1504]: eth0: DHCPv4 address 10.200.20.19/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 21:22:19.730990 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 21:22:19.770017 waagent[1449]: 2023-10-02T21:22:19.769890Z INFO Daemon Daemon Decode custom data Oct 2 21:22:19.774955 waagent[1449]: 2023-10-02T21:22:19.774885Z INFO Daemon Daemon Save custom data Oct 2 21:22:20.978307 waagent[1449]: 2023-10-02T21:22:20.978211Z INFO Daemon Daemon Provisioning complete Oct 2 21:22:20.997314 waagent[1449]: 2023-10-02T21:22:20.997219Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 21:22:21.004474 waagent[1449]: 2023-10-02T21:22:21.004373Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 21:22:21.021738 waagent[1449]: 2023-10-02T21:22:21.021640Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 21:22:21.346012 waagent[1513]: 2023-10-02T21:22:21.345850Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 21:22:21.346786 waagent[1513]: 2023-10-02T21:22:21.346718Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:22:21.346929 waagent[1513]: 2023-10-02T21:22:21.346881Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:22:21.360009 waagent[1513]: 2023-10-02T21:22:21.359923Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 21:22:21.360206 waagent[1513]: 2023-10-02T21:22:21.360156Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 21:22:21.457534 waagent[1513]: 2023-10-02T21:22:21.457373Z INFO ExtHandler ExtHandler Found private key matching thumbprint 2B12E5E73AA74E658887ACBB94FD37D164912CAF Oct 2 21:22:21.457783 waagent[1513]: 2023-10-02T21:22:21.457729Z INFO ExtHandler ExtHandler Certificate with thumbprint 84EA9C4588B4C33C626D2CDD28D094593DE72975 has no matching private key. Oct 2 21:22:21.458002 waagent[1513]: 2023-10-02T21:22:21.457955Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 21:22:21.471734 waagent[1513]: 2023-10-02T21:22:21.471677Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 13723100-36da-487a-8ca3-6c0f43ffc942 New eTag: 9681240863052338411] Oct 2 21:22:21.472407 waagent[1513]: 2023-10-02T21:22:21.472345Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 21:22:21.576259 waagent[1513]: 2023-10-02T21:22:21.576074Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 21:22:21.586617 waagent[1513]: 2023-10-02T21:22:21.586534Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1513 Oct 2 21:22:21.590469 waagent[1513]: 2023-10-02T21:22:21.590400Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 21:22:21.591873 waagent[1513]: 2023-10-02T21:22:21.591813Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 21:22:21.709122 waagent[1513]: 2023-10-02T21:22:21.709055Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 21:22:21.709885 waagent[1513]: 2023-10-02T21:22:21.709814Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 21:22:21.732347 waagent[1513]: 2023-10-02T21:22:21.732266Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 21:22:21.734700 waagent[1513]: 2023-10-02T21:22:21.734633Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 21:22:21.736850 waagent[1513]: 2023-10-02T21:22:21.736773Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 21:22:21.738524 waagent[1513]: 2023-10-02T21:22:21.738453Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 21:22:21.738893 waagent[1513]: 2023-10-02T21:22:21.738816Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:22:21.739337 waagent[1513]: 2023-10-02T21:22:21.739262Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:22:21.739989 waagent[1513]: 2023-10-02T21:22:21.739923Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 21:22:21.740338 waagent[1513]: 2023-10-02T21:22:21.740278Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 21:22:21.740338 waagent[1513]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 21:22:21.740338 waagent[1513]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 21:22:21.740338 waagent[1513]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 21:22:21.740338 waagent[1513]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:22:21.740338 waagent[1513]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:22:21.740338 waagent[1513]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:22:21.742727 waagent[1513]: 2023-10-02T21:22:21.742537Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 21:22:21.743104 waagent[1513]: 2023-10-02T21:22:21.743031Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:22:21.743466 waagent[1513]: 2023-10-02T21:22:21.743394Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:22:21.744780 waagent[1513]: 2023-10-02T21:22:21.744697Z INFO EnvHandler ExtHandler Configure routes Oct 2 21:22:21.744952 waagent[1513]: 2023-10-02T21:22:21.744901Z INFO EnvHandler ExtHandler Gateway:None Oct 2 21:22:21.745066 waagent[1513]: 2023-10-02T21:22:21.745022Z INFO EnvHandler ExtHandler Routes:None Oct 2 21:22:21.745987 waagent[1513]: 2023-10-02T21:22:21.745928Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 21:22:21.746146 waagent[1513]: 2023-10-02T21:22:21.746077Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 21:22:21.746923 waagent[1513]: 2023-10-02T21:22:21.746823Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 21:22:21.747116 waagent[1513]: 2023-10-02T21:22:21.747049Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 21:22:21.747443 waagent[1513]: 2023-10-02T21:22:21.747372Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 21:22:21.759140 waagent[1513]: 2023-10-02T21:22:21.759060Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 21:22:21.760054 waagent[1513]: 2023-10-02T21:22:21.760005Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 21:22:21.761084 waagent[1513]: 2023-10-02T21:22:21.761030Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 21:22:21.781430 waagent[1513]: 2023-10-02T21:22:21.781373Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 21:22:21.791463 waagent[1513]: 2023-10-02T21:22:21.791384Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1504' Oct 2 21:22:21.869850 waagent[1513]: 2023-10-02T21:22:21.869708Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 21:22:21.869850 waagent[1513]: Executing ['ip', '-a', '-o', 'link']: Oct 2 21:22:21.869850 waagent[1513]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 21:22:21.869850 waagent[1513]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:c5:27:de brd ff:ff:ff:ff:ff:ff Oct 2 21:22:21.869850 waagent[1513]: 3: enP17752s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:c5:27:de brd ff:ff:ff:ff:ff:ff\ altname enP17752p0s2 Oct 2 21:22:21.869850 waagent[1513]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 21:22:21.869850 waagent[1513]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 21:22:21.869850 waagent[1513]: 2: eth0 inet 10.200.20.19/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 21:22:21.869850 waagent[1513]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 21:22:21.869850 waagent[1513]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 21:22:21.869850 waagent[1513]: 2: eth0 inet6 fe80::20d:3aff:fec5:27de/64 scope link \ valid_lft forever preferred_lft forever Oct 2 21:22:21.922940 waagent[1513]: 2023-10-02T21:22:21.922855Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.9.1.1 -- exiting Oct 2 21:22:22.026738 waagent[1449]: 2023-10-02T21:22:22.026532Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 21:22:22.034694 waagent[1449]: 2023-10-02T21:22:22.034634Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.9.1.1 to be the latest agent Oct 2 21:22:23.212654 waagent[1542]: 2023-10-02T21:22:23.212477Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.9.1.1) Oct 2 21:22:23.213540 waagent[1542]: 2023-10-02T21:22:23.213466Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 21:22:23.213690 waagent[1542]: 2023-10-02T21:22:23.213629Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 21:22:23.229638 waagent[1542]: 2023-10-02T21:22:23.229453Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 21:22:23.230139 waagent[1542]: 2023-10-02T21:22:23.230077Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:22:23.230330 waagent[1542]: 2023-10-02T21:22:23.230273Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:22:23.243898 waagent[1542]: 2023-10-02T21:22:23.243792Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 21:22:23.252915 waagent[1542]: 2023-10-02T21:22:23.252854Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 21:22:23.253992 waagent[1542]: 2023-10-02T21:22:23.253930Z INFO ExtHandler Oct 2 21:22:23.254150 waagent[1542]: 2023-10-02T21:22:23.254100Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: db0bb28e-0cd0-4075-ad04-805d22f49cb2 eTag: 9681240863052338411 source: Fabric] Oct 2 21:22:23.254941 waagent[1542]: 2023-10-02T21:22:23.254880Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 21:22:23.256189 waagent[1542]: 2023-10-02T21:22:23.256127Z INFO ExtHandler Oct 2 21:22:23.256349 waagent[1542]: 2023-10-02T21:22:23.256300Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 21:22:23.262327 waagent[1542]: 2023-10-02T21:22:23.262274Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 21:22:23.262797 waagent[1542]: 2023-10-02T21:22:23.262743Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 21:22:23.284118 waagent[1542]: 2023-10-02T21:22:23.284061Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 21:22:23.377918 waagent[1542]: 2023-10-02T21:22:23.377765Z INFO ExtHandler Downloaded certificate {'thumbprint': '84EA9C4588B4C33C626D2CDD28D094593DE72975', 'hasPrivateKey': False} Oct 2 21:22:23.378996 waagent[1542]: 2023-10-02T21:22:23.378933Z INFO ExtHandler Downloaded certificate {'thumbprint': '2B12E5E73AA74E658887ACBB94FD37D164912CAF', 'hasPrivateKey': True} Oct 2 21:22:23.380081 waagent[1542]: 2023-10-02T21:22:23.380018Z INFO ExtHandler Fetch goal state completed Oct 2 21:22:23.402104 waagent[1542]: 2023-10-02T21:22:23.402016Z INFO ExtHandler ExtHandler WALinuxAgent-2.9.1.1 running as process 1542 Oct 2 21:22:23.406543 waagent[1542]: 2023-10-02T21:22:23.406458Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 21:22:23.408294 waagent[1542]: 2023-10-02T21:22:23.408198Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 21:22:23.423478 waagent[1542]: 2023-10-02T21:22:23.423363Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 21:22:23.424351 waagent[1542]: 2023-10-02T21:22:23.424272Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 21:22:23.438618 waagent[1542]: 2023-10-02T21:22:23.438524Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 21:22:23.439191 waagent[1542]: 2023-10-02T21:22:23.439131Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 21:22:23.447388 waagent[1542]: 2023-10-02T21:22:23.447268Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. Oct 2 21:22:23.451282 waagent[1542]: 2023-10-02T21:22:23.451202Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 21:22:23.452896 waagent[1542]: 2023-10-02T21:22:23.452820Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 21:22:23.453599 waagent[1542]: 2023-10-02T21:22:23.453536Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:22:23.453873 waagent[1542]: 2023-10-02T21:22:23.453821Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:22:23.454583 waagent[1542]: 2023-10-02T21:22:23.454513Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 21:22:23.454976 waagent[1542]: 2023-10-02T21:22:23.454923Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 21:22:23.454976 waagent[1542]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 21:22:23.454976 waagent[1542]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 21:22:23.454976 waagent[1542]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 21:22:23.454976 waagent[1542]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:22:23.454976 waagent[1542]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:22:23.454976 waagent[1542]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:22:23.457500 waagent[1542]: 2023-10-02T21:22:23.457370Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 21:22:23.458173 waagent[1542]: 2023-10-02T21:22:23.458099Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:22:23.458825 waagent[1542]: 2023-10-02T21:22:23.458762Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:22:23.459472 waagent[1542]: 2023-10-02T21:22:23.459356Z INFO EnvHandler ExtHandler Configure routes Oct 2 21:22:23.459823 waagent[1542]: 2023-10-02T21:22:23.459745Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 21:22:23.460073 waagent[1542]: 2023-10-02T21:22:23.460014Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 21:22:23.462924 waagent[1542]: 2023-10-02T21:22:23.462706Z INFO EnvHandler ExtHandler Gateway:None Oct 2 21:22:23.463271 waagent[1542]: 2023-10-02T21:22:23.463189Z INFO EnvHandler ExtHandler Routes:None Oct 2 21:22:23.464787 waagent[1542]: 2023-10-02T21:22:23.464707Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 21:22:23.465189 waagent[1542]: 2023-10-02T21:22:23.465121Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 21:22:23.468447 waagent[1542]: 2023-10-02T21:22:23.468180Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 21:22:23.482772 waagent[1542]: 2023-10-02T21:22:23.482676Z INFO ExtHandler ExtHandler No requested version specified, checking for all versions for agent update (family: Prod) Oct 2 21:22:23.483158 waagent[1542]: 2023-10-02T21:22:23.483094Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 21:22:23.483158 waagent[1542]: Executing ['ip', '-a', '-o', 'link']: Oct 2 21:22:23.483158 waagent[1542]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 21:22:23.483158 waagent[1542]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:c5:27:de brd ff:ff:ff:ff:ff:ff Oct 2 21:22:23.483158 waagent[1542]: 3: enP17752s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:c5:27:de brd ff:ff:ff:ff:ff:ff\ altname enP17752p0s2 Oct 2 21:22:23.483158 waagent[1542]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 21:22:23.483158 waagent[1542]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 21:22:23.483158 waagent[1542]: 2: eth0 inet 10.200.20.19/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 21:22:23.483158 waagent[1542]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 21:22:23.483158 waagent[1542]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 21:22:23.483158 waagent[1542]: 2: eth0 inet6 fe80::20d:3aff:fec5:27de/64 scope link \ valid_lft forever preferred_lft forever Oct 2 21:22:23.483433 waagent[1542]: 2023-10-02T21:22:23.483377Z INFO ExtHandler ExtHandler Downloading manifest Oct 2 21:22:23.510903 waagent[1542]: 2023-10-02T21:22:23.510811Z INFO ExtHandler ExtHandler Oct 2 21:22:23.511116 waagent[1542]: 2023-10-02T21:22:23.511040Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 2e9ac8e5-8863-40bc-af87-765e25617745 correlation 8fa0934c-84e8-4a34-ac6d-fb52823d79c3 created: 2023-10-02T21:20:42.851624Z] Oct 2 21:22:23.515131 waagent[1542]: 2023-10-02T21:22:23.515038Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 21:22:23.518203 waagent[1542]: 2023-10-02T21:22:23.518119Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 7 ms] Oct 2 21:22:23.546052 waagent[1542]: 2023-10-02T21:22:23.545966Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 21:22:23.569254 waagent[1542]: 2023-10-02T21:22:23.569146Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.9.1.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 4419402B-44E3-497D-B4F3-04024AE090B2;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 21:22:23.768789 waagent[1542]: 2023-10-02T21:22:23.768537Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules. Current Firewall rules: Oct 2 21:22:23.768789 waagent[1542]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:22:23.768789 waagent[1542]: pkts bytes target prot opt in out source destination Oct 2 21:22:23.768789 waagent[1542]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:22:23.768789 waagent[1542]: pkts bytes target prot opt in out source destination Oct 2 21:22:23.768789 waagent[1542]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:22:23.768789 waagent[1542]: pkts bytes target prot opt in out source destination Oct 2 21:22:23.768789 waagent[1542]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 21:22:23.768789 waagent[1542]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 21:22:23.768789 waagent[1542]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 21:22:23.778703 waagent[1542]: 2023-10-02T21:22:23.778530Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 21:22:23.778703 waagent[1542]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:22:23.778703 waagent[1542]: pkts bytes target prot opt in out source destination Oct 2 21:22:23.778703 waagent[1542]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:22:23.778703 waagent[1542]: pkts bytes target prot opt in out source destination Oct 2 21:22:23.778703 waagent[1542]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:22:23.778703 waagent[1542]: pkts bytes target prot opt in out source destination Oct 2 21:22:23.778703 waagent[1542]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 21:22:23.778703 waagent[1542]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 21:22:23.778703 waagent[1542]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 21:22:23.779249 waagent[1542]: 2023-10-02T21:22:23.779176Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 21:22:47.316087 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Oct 2 21:22:49.492555 systemd[1]: Created slice system-sshd.slice. Oct 2 21:22:49.494897 systemd[1]: Started sshd@0-10.200.20.19:22-10.200.12.6:50960.service. Oct 2 21:22:50.185929 sshd[1592]: Accepted publickey for core from 10.200.12.6 port 50960 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:22:50.218145 sshd[1592]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:22:50.223707 systemd-logind[1338]: New session 3 of user core. Oct 2 21:22:50.224660 systemd[1]: Started session-3.scope. Oct 2 21:22:50.537436 systemd[1]: Started sshd@1-10.200.20.19:22-10.200.12.6:50976.service. Oct 2 21:22:50.952083 sshd[1597]: Accepted publickey for core from 10.200.12.6 port 50976 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:22:50.953853 sshd[1597]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:22:50.958265 systemd-logind[1338]: New session 4 of user core. Oct 2 21:22:50.959350 systemd[1]: Started session-4.scope. Oct 2 21:22:51.250305 sshd[1597]: pam_unix(sshd:session): session closed for user core Oct 2 21:22:51.253564 systemd-logind[1338]: Session 4 logged out. Waiting for processes to exit. Oct 2 21:22:51.253708 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 21:22:51.254472 systemd[1]: sshd@1-10.200.20.19:22-10.200.12.6:50976.service: Deactivated successfully. Oct 2 21:22:51.255685 systemd-logind[1338]: Removed session 4. Oct 2 21:22:51.324716 systemd[1]: Started sshd@2-10.200.20.19:22-10.200.12.6:50980.service. Oct 2 21:22:51.729591 sshd[1603]: Accepted publickey for core from 10.200.12.6 port 50980 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:22:51.732885 sshd[1603]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:22:51.737914 systemd[1]: Started session-5.scope. Oct 2 21:22:51.738632 systemd-logind[1338]: New session 5 of user core. Oct 2 21:22:52.020595 sshd[1603]: pam_unix(sshd:session): session closed for user core Oct 2 21:22:52.028152 systemd-logind[1338]: Session 5 logged out. Waiting for processes to exit. Oct 2 21:22:52.028377 systemd[1]: sshd@2-10.200.20.19:22-10.200.12.6:50980.service: Deactivated successfully. Oct 2 21:22:52.029139 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 21:22:52.029856 systemd-logind[1338]: Removed session 5. Oct 2 21:22:52.093641 systemd[1]: Started sshd@3-10.200.20.19:22-10.200.12.6:50992.service. Oct 2 21:22:52.538553 sshd[1609]: Accepted publickey for core from 10.200.12.6 port 50992 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:22:52.540520 sshd[1609]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:22:52.544820 systemd[1]: Started session-6.scope. Oct 2 21:22:52.546034 systemd-logind[1338]: New session 6 of user core. Oct 2 21:22:52.861724 sshd[1609]: pam_unix(sshd:session): session closed for user core Oct 2 21:22:52.864709 systemd-logind[1338]: Session 6 logged out. Waiting for processes to exit. Oct 2 21:22:52.864716 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 21:22:52.865295 systemd[1]: sshd@3-10.200.20.19:22-10.200.12.6:50992.service: Deactivated successfully. Oct 2 21:22:52.866282 systemd-logind[1338]: Removed session 6. Oct 2 21:22:52.931448 systemd[1]: Started sshd@4-10.200.20.19:22-10.200.12.6:51008.service. Oct 2 21:22:53.334133 sshd[1615]: Accepted publickey for core from 10.200.12.6 port 51008 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:22:53.335739 sshd[1615]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:22:53.339707 systemd-logind[1338]: New session 7 of user core. Oct 2 21:22:53.340136 systemd[1]: Started session-7.scope. Oct 2 21:22:53.913734 sudo[1618]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 21:22:53.914417 sudo[1618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:22:53.976428 dbus-daemon[1326]: avc: received setenforce notice (enforcing=1) Oct 2 21:22:53.978241 sudo[1618]: pam_unix(sudo:session): session closed for user root Oct 2 21:22:54.057042 sshd[1615]: pam_unix(sshd:session): session closed for user core Oct 2 21:22:54.060333 systemd-logind[1338]: Session 7 logged out. Waiting for processes to exit. Oct 2 21:22:54.061482 systemd[1]: sshd@4-10.200.20.19:22-10.200.12.6:51008.service: Deactivated successfully. Oct 2 21:22:54.062210 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 21:22:54.062716 systemd-logind[1338]: Removed session 7. Oct 2 21:22:54.128328 systemd[1]: Started sshd@5-10.200.20.19:22-10.200.12.6:51022.service. Oct 2 21:22:54.533693 sshd[1622]: Accepted publickey for core from 10.200.12.6 port 51022 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:22:54.535368 sshd[1622]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:22:54.539541 systemd-logind[1338]: New session 8 of user core. Oct 2 21:22:54.539996 systemd[1]: Started session-8.scope. Oct 2 21:22:54.766349 sudo[1626]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 21:22:54.766880 sudo[1626]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:22:54.770686 sudo[1626]: pam_unix(sudo:session): session closed for user root Oct 2 21:22:54.777403 sudo[1625]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 21:22:54.777606 sudo[1625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:22:54.789024 systemd[1]: Stopping audit-rules.service... Oct 2 21:22:54.791000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 21:22:54.796196 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:22:54.796270 kernel: audit: type=1305 audit(1696281774.791:171): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 21:22:54.796523 auditctl[1629]: No rules Oct 2 21:22:54.797028 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 21:22:54.797201 systemd[1]: Stopped audit-rules.service. Oct 2 21:22:54.791000 audit[1629]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd7d48e30 a2=420 a3=0 items=0 ppid=1 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:54.798996 systemd[1]: Starting audit-rules.service... Oct 2 21:22:54.841359 kernel: audit: type=1300 audit(1696281774.791:171): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd7d48e30 a2=420 a3=0 items=0 ppid=1 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:54.791000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 21:22:54.848447 kernel: audit: type=1327 audit(1696281774.791:171): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 21:22:54.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:54.865112 kernel: audit: type=1131 audit(1696281774.795:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:54.865096 systemd[1]: Finished audit-rules.service. Oct 2 21:22:54.865279 augenrules[1646]: No rules Oct 2 21:22:54.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:54.881625 kernel: audit: type=1130 audit(1696281774.865:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:54.881867 sudo[1625]: pam_unix(sudo:session): session closed for user root Oct 2 21:22:54.881000 audit[1625]: USER_END pid=1625 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:22:54.900943 kernel: audit: type=1106 audit(1696281774.881:174): pid=1625 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:22:54.881000 audit[1625]: CRED_DISP pid=1625 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:22:54.917665 kernel: audit: type=1104 audit(1696281774.881:175): pid=1625 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:22:54.943848 sshd[1622]: pam_unix(sshd:session): session closed for user core Oct 2 21:22:54.944000 audit[1622]: USER_END pid=1622 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:54.944000 audit[1622]: CRED_DISP pid=1622 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:54.988119 kernel: audit: type=1106 audit(1696281774.944:176): pid=1622 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:54.988200 kernel: audit: type=1104 audit(1696281774.944:177): pid=1622 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:54.988502 systemd[1]: sshd@5-10.200.20.19:22-10.200.12.6:51022.service: Deactivated successfully. Oct 2 21:22:54.988000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.19:22-10.200.12.6:51022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.008298 kernel: audit: type=1131 audit(1696281774.988:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.19:22-10.200.12.6:51022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:54.989315 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 21:22:55.008614 systemd-logind[1338]: Session 8 logged out. Waiting for processes to exit. Oct 2 21:22:55.017943 systemd[1]: Started sshd@6-10.200.20.19:22-10.200.12.6:51028.service. Oct 2 21:22:55.018725 systemd-logind[1338]: Removed session 8. Oct 2 21:22:55.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.19:22-10.200.12.6:51028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.065843 update_engine[1340]: I1002 21:22:55.065049 1340 update_attempter.cc:505] Updating boot flags... Oct 2 21:22:55.423000 audit[1652]: USER_ACCT pid=1652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:55.424483 sshd[1652]: Accepted publickey for core from 10.200.12.6 port 51028 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:22:55.427000 audit[1652]: CRED_ACQ pid=1652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:55.427000 audit[1652]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb792f30 a2=3 a3=1 items=0 ppid=1 pid=1652 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:55.427000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:22:55.427827 sshd[1652]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:22:55.432192 systemd-logind[1338]: New session 9 of user core. Oct 2 21:22:55.432668 systemd[1]: Started session-9.scope. Oct 2 21:22:55.436000 audit[1652]: USER_START pid=1652 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:55.440000 audit[1720]: CRED_ACQ pid=1720 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:22:55.655000 audit[1721]: USER_ACCT pid=1721 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.656441 sudo[1721]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 21:22:55.656000 audit[1721]: CRED_REFR pid=1721 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:22:55.656973 sudo[1721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:22:55.658000 audit[1721]: USER_START pid=1721 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:22:56.373084 systemd[1]: Starting docker.service... Oct 2 21:22:56.432993 env[1736]: time="2023-10-02T21:22:56.432928963Z" level=info msg="Starting up" Oct 2 21:22:56.434867 env[1736]: time="2023-10-02T21:22:56.434831443Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 21:22:56.434867 env[1736]: time="2023-10-02T21:22:56.434855443Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 21:22:56.434978 env[1736]: time="2023-10-02T21:22:56.434885443Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 21:22:56.434978 env[1736]: time="2023-10-02T21:22:56.434895883Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 21:22:56.437470 env[1736]: time="2023-10-02T21:22:56.437448283Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 21:22:56.437555 env[1736]: time="2023-10-02T21:22:56.437541922Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 21:22:56.437629 env[1736]: time="2023-10-02T21:22:56.437612562Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 21:22:56.437691 env[1736]: time="2023-10-02T21:22:56.437679322Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 21:22:56.443124 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3440959274-merged.mount: Deactivated successfully. Oct 2 21:22:56.563905 env[1736]: time="2023-10-02T21:22:56.563870317Z" level=info msg="Loading containers: start." Oct 2 21:22:56.666000 audit[1763]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=1763 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.666000 audit[1763]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd9ea33f0 a2=0 a3=1 items=0 ppid=1736 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.666000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 21:22:56.668000 audit[1765]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=1765 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.668000 audit[1765]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff96c0be0 a2=0 a3=1 items=0 ppid=1736 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.668000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 21:22:56.672000 audit[1767]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=1767 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.672000 audit[1767]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffcb57f2d0 a2=0 a3=1 items=0 ppid=1736 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.672000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 21:22:56.675000 audit[1769]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1769 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.675000 audit[1769]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc75d6ea0 a2=0 a3=1 items=0 ppid=1736 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.675000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 21:22:56.678000 audit[1771]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1771 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.678000 audit[1771]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffea77bf20 a2=0 a3=1 items=0 ppid=1736 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.678000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 21:22:56.681000 audit[1773]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1773 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.681000 audit[1773]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff28dbc10 a2=0 a3=1 items=0 ppid=1736 pid=1773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.681000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 21:22:56.696000 audit[1775]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1775 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.696000 audit[1775]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffbce01e0 a2=0 a3=1 items=0 ppid=1736 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.696000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 21:22:56.699000 audit[1777]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1777 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.699000 audit[1777]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffc66279f0 a2=0 a3=1 items=0 ppid=1736 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.699000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 21:22:56.703000 audit[1779]: NETFILTER_CFG table=filter:13 family=2 entries=2 op=nft_register_chain pid=1779 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.703000 audit[1779]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffd0d05be0 a2=0 a3=1 items=0 ppid=1736 pid=1779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.703000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:22:56.727000 audit[1783]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_unregister_rule pid=1783 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.727000 audit[1783]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffffa9ebe90 a2=0 a3=1 items=0 ppid=1736 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.727000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:22:56.729000 audit[1784]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1784 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.729000 audit[1784]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff2118d20 a2=0 a3=1 items=0 ppid=1736 pid=1784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.729000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:22:56.776252 kernel: Initializing XFRM netlink socket Oct 2 21:22:56.804172 env[1736]: time="2023-10-02T21:22:56.804123747Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 21:22:56.931000 audit[1791]: NETFILTER_CFG table=nat:16 family=2 entries=2 op=nft_register_chain pid=1791 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.931000 audit[1791]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffff8112be0 a2=0 a3=1 items=0 ppid=1736 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.931000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 21:22:56.959000 audit[1794]: NETFILTER_CFG table=nat:17 family=2 entries=1 op=nft_register_rule pid=1794 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.959000 audit[1794]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffff7683160 a2=0 a3=1 items=0 ppid=1736 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.959000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 21:22:56.965000 audit[1797]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_register_rule pid=1797 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.965000 audit[1797]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffffb31fc00 a2=0 a3=1 items=0 ppid=1736 pid=1797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.965000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 21:22:56.968000 audit[1799]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1799 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.968000 audit[1799]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc49173b0 a2=0 a3=1 items=0 ppid=1736 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.968000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 21:22:56.971000 audit[1801]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1801 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.971000 audit[1801]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffcf4c4390 a2=0 a3=1 items=0 ppid=1736 pid=1801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.971000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 21:22:56.974000 audit[1803]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1803 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.974000 audit[1803]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd046a340 a2=0 a3=1 items=0 ppid=1736 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.974000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 21:22:56.977000 audit[1805]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1805 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.977000 audit[1805]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffebb2aec0 a2=0 a3=1 items=0 ppid=1736 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.977000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 21:22:56.981000 audit[1807]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1807 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.981000 audit[1807]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=fffffe00b210 a2=0 a3=1 items=0 ppid=1736 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.981000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 21:22:56.983000 audit[1809]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1809 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.983000 audit[1809]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffe3563df0 a2=0 a3=1 items=0 ppid=1736 pid=1809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.983000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 21:22:56.986000 audit[1811]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1811 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.986000 audit[1811]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffcddf5220 a2=0 a3=1 items=0 ppid=1736 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.986000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 21:22:56.991000 audit[1813]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1813 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:56.991000 audit[1813]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff79a0370 a2=0 a3=1 items=0 ppid=1736 pid=1813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:56.991000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 21:22:56.991843 systemd-networkd[1504]: docker0: Link UP Oct 2 21:22:57.018000 audit[1817]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_unregister_rule pid=1817 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.018000 audit[1817]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcd3faa30 a2=0 a3=1 items=0 ppid=1736 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.018000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:22:57.022000 audit[1818]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1818 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:22:57.022000 audit[1818]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd30dbfd0 a2=0 a3=1 items=0 ppid=1736 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:22:57.022000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:22:57.022894 env[1736]: time="2023-10-02T21:22:57.022845058Z" level=info msg="Loading containers: done." Oct 2 21:22:57.039852 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2689243876-merged.mount: Deactivated successfully. Oct 2 21:22:57.063210 env[1736]: time="2023-10-02T21:22:57.063170096Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 21:22:57.063785 env[1736]: time="2023-10-02T21:22:57.063764896Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 21:22:57.063966 env[1736]: time="2023-10-02T21:22:57.063951576Z" level=info msg="Daemon has completed initialization" Oct 2 21:22:57.089503 systemd[1]: Started docker.service. Oct 2 21:22:57.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:57.097031 env[1736]: time="2023-10-02T21:22:57.096982735Z" level=info msg="API listen on /run/docker.sock" Oct 2 21:22:57.134590 systemd[1]: Reloading. Oct 2 21:22:57.212190 /usr/lib/systemd/system-generators/torcx-generator[1864]: time="2023-10-02T21:22:57Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:22:57.212680 /usr/lib/systemd/system-generators/torcx-generator[1864]: time="2023-10-02T21:22:57Z" level=info msg="torcx already run" Oct 2 21:22:57.377073 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:22:57.377091 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:22:57.394276 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit: BPF prog-id=35 op=LOAD Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.465000 audit: BPF prog-id=36 op=LOAD Oct 2 21:22:57.465000 audit: BPF prog-id=21 op=UNLOAD Oct 2 21:22:57.465000 audit: BPF prog-id=22 op=UNLOAD Oct 2 21:22:57.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.466000 audit: BPF prog-id=37 op=LOAD Oct 2 21:22:57.466000 audit: BPF prog-id=28 op=UNLOAD Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit: BPF prog-id=38 op=LOAD Oct 2 21:22:57.467000 audit: BPF prog-id=18 op=UNLOAD Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit: BPF prog-id=39 op=LOAD Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.467000 audit: BPF prog-id=40 op=LOAD Oct 2 21:22:57.467000 audit: BPF prog-id=19 op=UNLOAD Oct 2 21:22:57.467000 audit: BPF prog-id=20 op=UNLOAD Oct 2 21:22:57.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit: BPF prog-id=41 op=LOAD Oct 2 21:22:57.470000 audit: BPF prog-id=29 op=UNLOAD Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit: BPF prog-id=42 op=LOAD Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.470000 audit: BPF prog-id=43 op=LOAD Oct 2 21:22:57.470000 audit: BPF prog-id=30 op=UNLOAD Oct 2 21:22:57.470000 audit: BPF prog-id=31 op=UNLOAD Oct 2 21:22:57.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.471000 audit: BPF prog-id=44 op=LOAD Oct 2 21:22:57.471000 audit: BPF prog-id=27 op=UNLOAD Oct 2 21:22:57.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.472000 audit: BPF prog-id=45 op=LOAD Oct 2 21:22:57.472000 audit: BPF prog-id=34 op=UNLOAD Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit: BPF prog-id=46 op=LOAD Oct 2 21:22:57.473000 audit: BPF prog-id=24 op=UNLOAD Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit: BPF prog-id=47 op=LOAD Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit: BPF prog-id=48 op=LOAD Oct 2 21:22:57.473000 audit: BPF prog-id=25 op=UNLOAD Oct 2 21:22:57.473000 audit: BPF prog-id=26 op=UNLOAD Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:22:57.473000 audit: BPF prog-id=49 op=LOAD Oct 2 21:22:57.473000 audit: BPF prog-id=32 op=UNLOAD Oct 2 21:22:57.491122 systemd[1]: Started kubelet.service. Oct 2 21:22:57.492000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:22:57.597275 kubelet[1924]: E1002 21:22:57.597194 1924 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 21:22:57.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:22:57.599515 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:22:57.599631 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:23:02.413384 env[1353]: time="2023-10-02T21:23:02.413344274Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 21:23:03.296616 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount201763697.mount: Deactivated successfully. Oct 2 21:23:06.313993 env[1353]: time="2023-10-02T21:23:06.313916375Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:06.318904 env[1353]: time="2023-10-02T21:23:06.318860455Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:06.322728 env[1353]: time="2023-10-02T21:23:06.322693055Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:06.326326 env[1353]: time="2023-10-02T21:23:06.326288975Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:06.326762 env[1353]: time="2023-10-02T21:23:06.326737415Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36\"" Oct 2 21:23:06.344105 env[1353]: time="2023-10-02T21:23:06.344063694Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 21:23:07.637673 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 21:23:07.637852 systemd[1]: Stopped kubelet.service. Oct 2 21:23:07.649054 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 21:23:07.649182 kernel: audit: type=1130 audit(1696281787.637:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:07.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:07.639373 systemd[1]: Started kubelet.service. Oct 2 21:23:07.637000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:07.675280 kernel: audit: type=1131 audit(1696281787.637:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:07.675407 kernel: audit: type=1130 audit(1696281787.639:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:07.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:07.770911 kubelet[1945]: E1002 21:23:07.770866 1945 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 21:23:07.773803 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:23:07.773936 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:23:07.773000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:23:07.792245 kernel: audit: type=1131 audit(1696281787.773:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:23:10.037042 env[1353]: time="2023-10-02T21:23:10.036994991Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:10.043726 env[1353]: time="2023-10-02T21:23:10.043692634Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:10.047834 env[1353]: time="2023-10-02T21:23:10.047808176Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:10.051404 env[1353]: time="2023-10-02T21:23:10.051366270Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:10.052025 env[1353]: time="2023-10-02T21:23:10.051997187Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b\"" Oct 2 21:23:10.066586 env[1353]: time="2023-10-02T21:23:10.066556802Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 21:23:12.412399 env[1353]: time="2023-10-02T21:23:12.412327775Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:12.416879 env[1353]: time="2023-10-02T21:23:12.416824539Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:12.421590 env[1353]: time="2023-10-02T21:23:12.421542275Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:12.425890 env[1353]: time="2023-10-02T21:23:12.425835863Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:12.426799 env[1353]: time="2023-10-02T21:23:12.426752430Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed\"" Oct 2 21:23:12.443354 env[1353]: time="2023-10-02T21:23:12.443321499Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 21:23:13.696270 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3108866925.mount: Deactivated successfully. Oct 2 21:23:14.609265 env[1353]: time="2023-10-02T21:23:14.609184974Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:14.614394 env[1353]: time="2023-10-02T21:23:14.614330531Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:14.617419 env[1353]: time="2023-10-02T21:23:14.617362176Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:14.620947 env[1353]: time="2023-10-02T21:23:14.620903721Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:14.621597 env[1353]: time="2023-10-02T21:23:14.621531927Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af\"" Oct 2 21:23:14.641271 env[1353]: time="2023-10-02T21:23:14.641210022Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 21:23:15.228112 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount715560519.mount: Deactivated successfully. Oct 2 21:23:15.654371 env[1353]: time="2023-10-02T21:23:15.654335702Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:15.659784 env[1353]: time="2023-10-02T21:23:15.659751604Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:15.664405 env[1353]: time="2023-10-02T21:23:15.664379437Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:15.667760 env[1353]: time="2023-10-02T21:23:15.667736574Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:15.668140 env[1353]: time="2023-10-02T21:23:15.668110612Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 21:23:15.689049 env[1353]: time="2023-10-02T21:23:15.689003391Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 21:23:16.640448 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2630163890.mount: Deactivated successfully. Oct 2 21:23:17.887734 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 21:23:17.887909 systemd[1]: Stopped kubelet.service. Oct 2 21:23:17.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:17.889533 systemd[1]: Started kubelet.service. Oct 2 21:23:17.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:17.931680 kernel: audit: type=1130 audit(1696281797.886:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:17.931834 kernel: audit: type=1131 audit(1696281797.886:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:17.931872 kernel: audit: type=1130 audit(1696281797.888:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:17.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:17.998781 kubelet[1973]: E1002 21:23:17.998731 1973 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 21:23:18.000000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:23:18.001042 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:23:18.001180 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:23:18.023448 kernel: audit: type=1131 audit(1696281798.000:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:23:21.055104 env[1353]: time="2023-10-02T21:23:21.055015534Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:21.063700 env[1353]: time="2023-10-02T21:23:21.063653377Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:21.067450 env[1353]: time="2023-10-02T21:23:21.067415252Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:21.071166 env[1353]: time="2023-10-02T21:23:21.071122413Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:21.072000 env[1353]: time="2023-10-02T21:23:21.071970691Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\"" Oct 2 21:23:21.088463 env[1353]: time="2023-10-02T21:23:21.088415136Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 21:23:21.955057 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount67556599.mount: Deactivated successfully. Oct 2 21:23:22.479885 env[1353]: time="2023-10-02T21:23:22.479835937Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:22.486259 env[1353]: time="2023-10-02T21:23:22.486219295Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:22.491428 env[1353]: time="2023-10-02T21:23:22.491400925Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:22.495731 env[1353]: time="2023-10-02T21:23:22.495707159Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:22.496405 env[1353]: time="2023-10-02T21:23:22.496378695Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 21:23:27.878739 systemd[1]: Stopped kubelet.service. Oct 2 21:23:27.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:27.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:27.931564 kernel: audit: type=1130 audit(1696281807.877:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:27.931754 kernel: audit: type=1131 audit(1696281807.877:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:27.953681 systemd[1]: Reloading. Oct 2 21:23:28.065685 /usr/lib/systemd/system-generators/torcx-generator[2071]: time="2023-10-02T21:23:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:23:28.065715 /usr/lib/systemd/system-generators/torcx-generator[2071]: time="2023-10-02T21:23:28Z" level=info msg="torcx already run" Oct 2 21:23:28.200455 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:23:28.200480 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:23:28.219288 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:23:28.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.332153 kernel: audit: type=1400 audit(1696281808.284:397): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.332255 kernel: audit: type=1400 audit(1696281808.284:398): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.349564 kernel: audit: type=1400 audit(1696281808.284:399): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.366978 kernel: audit: type=1400 audit(1696281808.284:400): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.384682 kernel: audit: type=1400 audit(1696281808.284:401): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.384746 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 21:23:28.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.413248 kernel: audit: type=1400 audit(1696281808.284:402): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.413411 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 21:23:28.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit: BPF prog-id=50 op=LOAD Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit: BPF prog-id=51 op=LOAD Oct 2 21:23:28.303000 audit: BPF prog-id=35 op=UNLOAD Oct 2 21:23:28.303000 audit: BPF prog-id=36 op=UNLOAD Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.330000 audit: BPF prog-id=52 op=LOAD Oct 2 21:23:28.330000 audit: BPF prog-id=37 op=UNLOAD Oct 2 21:23:28.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit: BPF prog-id=53 op=LOAD Oct 2 21:23:28.348000 audit: BPF prog-id=38 op=UNLOAD Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit: BPF prog-id=54 op=LOAD Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.365000 audit: BPF prog-id=55 op=LOAD Oct 2 21:23:28.365000 audit: BPF prog-id=39 op=UNLOAD Oct 2 21:23:28.365000 audit: BPF prog-id=40 op=UNLOAD Oct 2 21:23:28.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.425000 audit: BPF prog-id=56 op=LOAD Oct 2 21:23:28.425000 audit: BPF prog-id=41 op=UNLOAD Oct 2 21:23:28.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.425000 audit: BPF prog-id=57 op=LOAD Oct 2 21:23:28.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.426000 audit: BPF prog-id=58 op=LOAD Oct 2 21:23:28.426000 audit: BPF prog-id=42 op=UNLOAD Oct 2 21:23:28.426000 audit: BPF prog-id=43 op=UNLOAD Oct 2 21:23:28.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.427000 audit: BPF prog-id=59 op=LOAD Oct 2 21:23:28.427000 audit: BPF prog-id=44 op=UNLOAD Oct 2 21:23:28.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.428000 audit: BPF prog-id=60 op=LOAD Oct 2 21:23:28.428000 audit: BPF prog-id=45 op=UNLOAD Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit: BPF prog-id=61 op=LOAD Oct 2 21:23:28.429000 audit: BPF prog-id=46 op=UNLOAD Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit: BPF prog-id=62 op=LOAD Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit: BPF prog-id=63 op=LOAD Oct 2 21:23:28.429000 audit: BPF prog-id=47 op=UNLOAD Oct 2 21:23:28.429000 audit: BPF prog-id=48 op=UNLOAD Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:28.429000 audit: BPF prog-id=64 op=LOAD Oct 2 21:23:28.429000 audit: BPF prog-id=49 op=UNLOAD Oct 2 21:23:28.450000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:28.451558 systemd[1]: Started kubelet.service. Oct 2 21:23:28.528585 kubelet[2131]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:23:28.528920 kubelet[2131]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 21:23:28.528967 kubelet[2131]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:23:28.529170 kubelet[2131]: I1002 21:23:28.529133 2131 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 21:23:29.752612 kubelet[2131]: I1002 21:23:29.752581 2131 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 21:23:29.752929 kubelet[2131]: I1002 21:23:29.752917 2131 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 21:23:29.753181 kubelet[2131]: I1002 21:23:29.753167 2131 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 21:23:29.760496 kubelet[2131]: I1002 21:23:29.760467 2131 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 21:23:29.760683 kubelet[2131]: W1002 21:23:29.760654 2131 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 21:23:29.761035 kubelet[2131]: E1002 21:23:29.761016 2131 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.20.19:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:29.761638 kubelet[2131]: I1002 21:23:29.761604 2131 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 21:23:29.761956 kubelet[2131]: I1002 21:23:29.761938 2131 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 21:23:29.762041 kubelet[2131]: I1002 21:23:29.762025 2131 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 21:23:29.762134 kubelet[2131]: I1002 21:23:29.762070 2131 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 21:23:29.762134 kubelet[2131]: I1002 21:23:29.762083 2131 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 21:23:29.762269 kubelet[2131]: I1002 21:23:29.762245 2131 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:23:29.765558 kubelet[2131]: I1002 21:23:29.765532 2131 kubelet.go:405] "Attempting to sync node with API server" Oct 2 21:23:29.765558 kubelet[2131]: I1002 21:23:29.765559 2131 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 21:23:29.765674 kubelet[2131]: I1002 21:23:29.765576 2131 kubelet.go:309] "Adding apiserver pod source" Oct 2 21:23:29.765674 kubelet[2131]: I1002 21:23:29.765613 2131 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 21:23:29.766446 kubelet[2131]: W1002 21:23:29.766395 2131 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-74bdccafa3&limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:29.766573 kubelet[2131]: E1002 21:23:29.766562 2131 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-74bdccafa3&limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:29.766762 kubelet[2131]: I1002 21:23:29.766748 2131 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 21:23:29.767218 kubelet[2131]: W1002 21:23:29.767197 2131 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 21:23:29.767881 kubelet[2131]: I1002 21:23:29.767859 2131 server.go:1168] "Started kubelet" Oct 2 21:23:29.768000 audit[2131]: AVC avc: denied { mac_admin } for pid=2131 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:29.768000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:23:29.768000 audit[2131]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000946030 a1=4000477560 a2=4000946000 a3=25 items=0 ppid=1 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:29.768000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:23:29.770059 kubelet[2131]: I1002 21:23:29.770044 2131 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 21:23:29.768000 audit[2131]: AVC avc: denied { mac_admin } for pid=2131 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:29.768000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:23:29.768000 audit[2131]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40002e3e80 a1=4000477578 a2=40009460c0 a3=25 items=0 ppid=1 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:29.768000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:23:29.770380 kubelet[2131]: I1002 21:23:29.770367 2131 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 21:23:29.770548 kubelet[2131]: I1002 21:23:29.770532 2131 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 21:23:29.771535 kubelet[2131]: E1002 21:23:29.771504 2131 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 21:23:29.771535 kubelet[2131]: E1002 21:23:29.771538 2131 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 21:23:29.771848 kubelet[2131]: W1002 21:23:29.771780 2131 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:29.771848 kubelet[2131]: E1002 21:23:29.771829 2131 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:29.772002 kubelet[2131]: E1002 21:23:29.771902 2131 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-74bdccafa3.178a6751962b368b", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-74bdccafa3", UID:"ci-3510.3.0-a-74bdccafa3", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-74bdccafa3"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 23, 29, 767839371, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 23, 29, 767839371, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.20.19:6443/api/v1/namespaces/default/events": dial tcp 10.200.20.19:6443: connect: connection refused'(may retry after sleeping) Oct 2 21:23:29.774127 kubelet[2131]: I1002 21:23:29.774097 2131 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 21:23:29.774789 kubelet[2131]: I1002 21:23:29.774754 2131 server.go:461] "Adding debug handlers to kubelet server" Oct 2 21:23:29.775732 kubelet[2131]: I1002 21:23:29.775701 2131 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 21:23:29.777938 kubelet[2131]: I1002 21:23:29.777919 2131 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 21:23:29.778029 kubelet[2131]: I1002 21:23:29.778013 2131 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 21:23:29.779152 kubelet[2131]: W1002 21:23:29.778309 2131 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:29.779152 kubelet[2131]: E1002 21:23:29.778359 2131 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:29.779152 kubelet[2131]: E1002 21:23:29.778586 2131 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74bdccafa3?timeout=10s\": dial tcp 10.200.20.19:6443: connect: connection refused" interval="200ms" Oct 2 21:23:29.783000 audit[2141]: NETFILTER_CFG table=mangle:29 family=2 entries=2 op=nft_register_chain pid=2141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:29.783000 audit[2141]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd1b8a540 a2=0 a3=1 items=0 ppid=2131 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:29.783000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 21:23:29.793000 audit[2144]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=2144 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:29.793000 audit[2144]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdb3b6bd0 a2=0 a3=1 items=0 ppid=2131 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:29.793000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 21:23:29.798000 audit[2147]: NETFILTER_CFG table=filter:31 family=2 entries=2 op=nft_register_chain pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:29.798000 audit[2147]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff234d6b0 a2=0 a3=1 items=0 ppid=2131 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:29.798000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 21:23:29.807000 audit[2149]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:29.807000 audit[2149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffdc2e5410 a2=0 a3=1 items=0 ppid=2131 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:29.807000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 21:23:29.856000 audit[2153]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:29.856000 audit[2153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff80f6110 a2=0 a3=1 items=0 ppid=2131 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:29.856000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 21:23:29.857900 kubelet[2131]: I1002 21:23:29.857859 2131 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 21:23:29.858000 audit[2154]: NETFILTER_CFG table=mangle:34 family=10 entries=2 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:29.858000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe180bbb0 a2=0 a3=1 items=0 ppid=2131 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:29.858000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 21:23:29.859911 kubelet[2131]: I1002 21:23:29.859879 2131 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 21:23:29.859978 kubelet[2131]: I1002 21:23:29.859935 2131 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 21:23:29.859978 kubelet[2131]: I1002 21:23:29.859955 2131 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 21:23:29.860023 kubelet[2131]: E1002 21:23:29.860002 2131 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 21:23:29.861105 kubelet[2131]: W1002 21:23:29.861054 2131 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:29.861220 kubelet[2131]: E1002 21:23:29.861208 2131 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:29.860000 audit[2155]: NETFILTER_CFG table=mangle:35 family=2 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:29.860000 audit[2155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcb1118b0 a2=0 a3=1 items=0 ppid=2131 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:29.860000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 21:23:29.861000 audit[2158]: NETFILTER_CFG table=mangle:36 family=10 entries=1 op=nft_register_chain pid=2158 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:29.861000 audit[2158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd52e2170 a2=0 a3=1 items=0 ppid=2131 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:29.861000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 21:23:29.862000 audit[2159]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_chain pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:29.862000 audit[2159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcf692580 a2=0 a3=1 items=0 ppid=2131 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:29.862000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 21:23:29.863000 audit[2160]: NETFILTER_CFG table=nat:38 family=10 entries=2 op=nft_register_chain pid=2160 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:29.863000 audit[2160]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffcb47ddc0 a2=0 a3=1 items=0 ppid=2131 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:29.863000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 21:23:29.865680 kubelet[2131]: I1002 21:23:29.865641 2131 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 21:23:29.865680 kubelet[2131]: I1002 21:23:29.865670 2131 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 21:23:29.865757 kubelet[2131]: I1002 21:23:29.865688 2131 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:23:29.865000 audit[2161]: NETFILTER_CFG table=filter:39 family=2 entries=1 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:29.865000 audit[2161]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc164b730 a2=0 a3=1 items=0 ppid=2131 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:29.865000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 21:23:29.866000 audit[2162]: NETFILTER_CFG table=filter:40 family=10 entries=2 op=nft_register_chain pid=2162 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:29.866000 audit[2162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe63739d0 a2=0 a3=1 items=0 ppid=2131 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:29.866000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 21:23:29.869792 kubelet[2131]: I1002 21:23:29.869770 2131 policy_none.go:49] "None policy: Start" Oct 2 21:23:29.870370 kubelet[2131]: I1002 21:23:29.870355 2131 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 21:23:29.870503 kubelet[2131]: I1002 21:23:29.870492 2131 state_mem.go:35] "Initializing new in-memory state store" Oct 2 21:23:29.876992 systemd[1]: Created slice kubepods.slice. Oct 2 21:23:29.880036 kubelet[2131]: I1002 21:23:29.880018 2131 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:29.881863 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 21:23:29.883126 kubelet[2131]: E1002 21:23:29.883105 2131 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.19:6443/api/v1/nodes\": dial tcp 10.200.20.19:6443: connect: connection refused" node="ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:29.888322 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 21:23:29.895835 kubelet[2131]: I1002 21:23:29.895811 2131 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 21:23:29.894000 audit[2131]: AVC avc: denied { mac_admin } for pid=2131 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:29.894000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:23:29.894000 audit[2131]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000946480 a1=4000f88dc8 a2=4000946450 a3=25 items=0 ppid=1 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:29.894000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:23:29.896103 kubelet[2131]: I1002 21:23:29.895884 2131 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 21:23:29.896128 kubelet[2131]: I1002 21:23:29.896105 2131 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 21:23:29.897475 kubelet[2131]: E1002 21:23:29.897458 2131 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-74bdccafa3\" not found" Oct 2 21:23:29.960429 kubelet[2131]: I1002 21:23:29.960383 2131 topology_manager.go:212] "Topology Admit Handler" Oct 2 21:23:29.962037 kubelet[2131]: I1002 21:23:29.962011 2131 topology_manager.go:212] "Topology Admit Handler" Oct 2 21:23:29.963328 kubelet[2131]: I1002 21:23:29.963299 2131 topology_manager.go:212] "Topology Admit Handler" Oct 2 21:23:29.970195 systemd[1]: Created slice kubepods-burstable-pod71d75891f97f771c6692d820126002b8.slice. Oct 2 21:23:29.972628 systemd[1]: Created slice kubepods-burstable-pod948a25608564ea9b10c5853286875c00.slice. Oct 2 21:23:29.979271 kubelet[2131]: E1002 21:23:29.979208 2131 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74bdccafa3?timeout=10s\": dial tcp 10.200.20.19:6443: connect: connection refused" interval="400ms" Oct 2 21:23:29.982702 systemd[1]: Created slice kubepods-burstable-pod394250db9a19ad4e99100d70ba85043e.slice. Oct 2 21:23:30.082443 kubelet[2131]: I1002 21:23:30.079997 2131 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/948a25608564ea9b10c5853286875c00-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-74bdccafa3\" (UID: \"948a25608564ea9b10c5853286875c00\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:30.082656 kubelet[2131]: I1002 21:23:30.082630 2131 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/948a25608564ea9b10c5853286875c00-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-74bdccafa3\" (UID: \"948a25608564ea9b10c5853286875c00\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:30.082803 kubelet[2131]: I1002 21:23:30.082779 2131 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/71d75891f97f771c6692d820126002b8-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-74bdccafa3\" (UID: \"71d75891f97f771c6692d820126002b8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:30.082922 kubelet[2131]: I1002 21:23:30.082913 2131 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/948a25608564ea9b10c5853286875c00-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-74bdccafa3\" (UID: \"948a25608564ea9b10c5853286875c00\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:30.083043 kubelet[2131]: I1002 21:23:30.083032 2131 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/948a25608564ea9b10c5853286875c00-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-74bdccafa3\" (UID: \"948a25608564ea9b10c5853286875c00\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:30.083151 kubelet[2131]: I1002 21:23:30.083140 2131 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/394250db9a19ad4e99100d70ba85043e-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-74bdccafa3\" (UID: \"394250db9a19ad4e99100d70ba85043e\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:30.083298 kubelet[2131]: I1002 21:23:30.083257 2131 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/71d75891f97f771c6692d820126002b8-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-74bdccafa3\" (UID: \"71d75891f97f771c6692d820126002b8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:30.083349 kubelet[2131]: I1002 21:23:30.083304 2131 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/71d75891f97f771c6692d820126002b8-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-74bdccafa3\" (UID: \"71d75891f97f771c6692d820126002b8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:30.083349 kubelet[2131]: I1002 21:23:30.083329 2131 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/948a25608564ea9b10c5853286875c00-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-74bdccafa3\" (UID: \"948a25608564ea9b10c5853286875c00\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:30.084918 kubelet[2131]: I1002 21:23:30.084901 2131 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:30.085416 kubelet[2131]: E1002 21:23:30.085395 2131 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.19:6443/api/v1/nodes\": dial tcp 10.200.20.19:6443: connect: connection refused" node="ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:30.282547 env[1353]: time="2023-10-02T21:23:30.282503380Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-74bdccafa3,Uid:71d75891f97f771c6692d820126002b8,Namespace:kube-system,Attempt:0,}" Oct 2 21:23:30.285998 env[1353]: time="2023-10-02T21:23:30.285684055Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-74bdccafa3,Uid:948a25608564ea9b10c5853286875c00,Namespace:kube-system,Attempt:0,}" Oct 2 21:23:30.285998 env[1353]: time="2023-10-02T21:23:30.285821205Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-74bdccafa3,Uid:394250db9a19ad4e99100d70ba85043e,Namespace:kube-system,Attempt:0,}" Oct 2 21:23:30.380073 kubelet[2131]: E1002 21:23:30.379973 2131 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74bdccafa3?timeout=10s\": dial tcp 10.200.20.19:6443: connect: connection refused" interval="800ms" Oct 2 21:23:30.487305 kubelet[2131]: I1002 21:23:30.487114 2131 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:30.487550 kubelet[2131]: E1002 21:23:30.487529 2131 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.19:6443/api/v1/nodes\": dial tcp 10.200.20.19:6443: connect: connection refused" node="ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:30.580274 kubelet[2131]: W1002 21:23:30.580143 2131 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-74bdccafa3&limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:30.580274 kubelet[2131]: E1002 21:23:30.580205 2131 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-74bdccafa3&limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:30.927316 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount405057900.mount: Deactivated successfully. Oct 2 21:23:30.961406 env[1353]: time="2023-10-02T21:23:30.961352979Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:30.964906 env[1353]: time="2023-10-02T21:23:30.964867069Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:30.973391 env[1353]: time="2023-10-02T21:23:30.973355178Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:30.977272 env[1353]: time="2023-10-02T21:23:30.977204602Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:30.980371 env[1353]: time="2023-10-02T21:23:30.980334362Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:30.988822 env[1353]: time="2023-10-02T21:23:30.988770314Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:30.992361 env[1353]: time="2023-10-02T21:23:30.992320322Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:30.995836 env[1353]: time="2023-10-02T21:23:30.995787655Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:30.998616 env[1353]: time="2023-10-02T21:23:30.998581161Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:31.002428 env[1353]: time="2023-10-02T21:23:31.002375432Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:31.008330 env[1353]: time="2023-10-02T21:23:31.008222274Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:31.014876 env[1353]: time="2023-10-02T21:23:31.014811541Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:31.053366 env[1353]: time="2023-10-02T21:23:31.053284420Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:23:31.053514 env[1353]: time="2023-10-02T21:23:31.053330977Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:23:31.053514 env[1353]: time="2023-10-02T21:23:31.053341856Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:23:31.053691 env[1353]: time="2023-10-02T21:23:31.053648193Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f56a7f153584def0a1a633280a6b38c345ba6334f8ed769f4dffa871581c1578 pid=2170 runtime=io.containerd.runc.v2 Oct 2 21:23:31.060636 kubelet[2131]: W1002 21:23:31.060528 2131 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:31.060636 kubelet[2131]: E1002 21:23:31.060599 2131 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:31.077565 systemd[1]: Started cri-containerd-f56a7f153584def0a1a633280a6b38c345ba6334f8ed769f4dffa871581c1578.scope. Oct 2 21:23:31.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.096000 audit: BPF prog-id=65 op=LOAD Oct 2 21:23:31.097000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.097000 audit[2179]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2170 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635366137663135333538346465663061316136333332383061366233 Oct 2 21:23:31.097000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.097000 audit[2179]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2170 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635366137663135333538346465663061316136333332383061366233 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit: BPF prog-id=66 op=LOAD Oct 2 21:23:31.098000 audit[2179]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2170 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635366137663135333538346465663061316136333332383061366233 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.098000 audit: BPF prog-id=67 op=LOAD Oct 2 21:23:31.098000 audit[2179]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2170 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635366137663135333538346465663061316136333332383061366233 Oct 2 21:23:31.099000 audit: BPF prog-id=67 op=UNLOAD Oct 2 21:23:31.099000 audit: BPF prog-id=66 op=UNLOAD Oct 2 21:23:31.099000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.099000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.099000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.099000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.099000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.099000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.099000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.099000 audit[2179]: AVC avc: denied { perfmon } for pid=2179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.099000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.099000 audit[2179]: AVC avc: denied { bpf } for pid=2179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.099000 audit: BPF prog-id=68 op=LOAD Oct 2 21:23:31.099000 audit[2179]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2170 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635366137663135333538346465663061316136333332383061366233 Oct 2 21:23:31.127632 env[1353]: time="2023-10-02T21:23:31.127390992Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:23:31.127632 env[1353]: time="2023-10-02T21:23:31.127428829Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:23:31.127632 env[1353]: time="2023-10-02T21:23:31.127439588Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:23:31.128054 env[1353]: time="2023-10-02T21:23:31.127969708Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/800e38148ed0222e6bd71d1a7e87acb23e3f5c69a9b5a235e17869766ae3caf3 pid=2212 runtime=io.containerd.runc.v2 Oct 2 21:23:31.128890 env[1353]: time="2023-10-02T21:23:31.128776768Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:23:31.128890 env[1353]: time="2023-10-02T21:23:31.128833164Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:23:31.128890 env[1353]: time="2023-10-02T21:23:31.128844123Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:23:31.129854 env[1353]: time="2023-10-02T21:23:31.129792012Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b53646a7c53e51b38f8d1dc16f0ef747ddba5242c394fa322874b91c8ee7981b pid=2207 runtime=io.containerd.runc.v2 Oct 2 21:23:31.141273 env[1353]: time="2023-10-02T21:23:31.141176839Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-74bdccafa3,Uid:948a25608564ea9b10c5853286875c00,Namespace:kube-system,Attempt:0,} returns sandbox id \"f56a7f153584def0a1a633280a6b38c345ba6334f8ed769f4dffa871581c1578\"" Oct 2 21:23:31.144712 env[1353]: time="2023-10-02T21:23:31.144674297Z" level=info msg="CreateContainer within sandbox \"f56a7f153584def0a1a633280a6b38c345ba6334f8ed769f4dffa871581c1578\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 21:23:31.153706 systemd[1]: Started cri-containerd-800e38148ed0222e6bd71d1a7e87acb23e3f5c69a9b5a235e17869766ae3caf3.scope. Oct 2 21:23:31.166392 systemd[1]: Started cri-containerd-b53646a7c53e51b38f8d1dc16f0ef747ddba5242c394fa322874b91c8ee7981b.scope. Oct 2 21:23:31.169423 kubelet[2131]: W1002 21:23:31.169215 2131 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:31.169423 kubelet[2131]: E1002 21:23:31.169378 2131 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:31.177991 env[1353]: time="2023-10-02T21:23:31.177896090Z" level=info msg="CreateContainer within sandbox \"f56a7f153584def0a1a633280a6b38c345ba6334f8ed769f4dffa871581c1578\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"670b3e32fc791ede0a6ba2d2f8e4351c8322bda574af78b8afec128682a59d1f\"" Oct 2 21:23:31.180586 env[1353]: time="2023-10-02T21:23:31.180208917Z" level=info msg="StartContainer for \"670b3e32fc791ede0a6ba2d2f8e4351c8322bda574af78b8afec128682a59d1f\"" Oct 2 21:23:31.180679 kubelet[2131]: E1002 21:23:31.180545 2131 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74bdccafa3?timeout=10s\": dial tcp 10.200.20.19:6443: connect: connection refused" interval="1.6s" Oct 2 21:23:31.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.188000 audit: BPF prog-id=69 op=LOAD Oct 2 21:23:31.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.189000 audit: BPF prog-id=70 op=LOAD Oct 2 21:23:31.189000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.189000 audit[2230]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001cfb38 a2=10 a3=0 items=0 ppid=2212 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.189000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830306533383134386564303232326536626437316431613765383761 Oct 2 21:23:31.189000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.189000 audit[2230]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001cf5a0 a2=3c a3=0 items=0 ppid=2212 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.189000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830306533383134386564303232326536626437316431613765383761 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2207 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235333634366137633533653531623338663864316463313666306566 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2207 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235333634366137633533653531623338663864316463313666306566 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit: BPF prog-id=71 op=LOAD Oct 2 21:23:31.190000 audit[2241]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2207 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235333634366137633533653531623338663864316463313666306566 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit: BPF prog-id=72 op=LOAD Oct 2 21:23:31.190000 audit[2241]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2207 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235333634366137633533653531623338663864316463313666306566 Oct 2 21:23:31.190000 audit: BPF prog-id=72 op=UNLOAD Oct 2 21:23:31.190000 audit: BPF prog-id=71 op=UNLOAD Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.190000 audit: BPF prog-id=73 op=LOAD Oct 2 21:23:31.190000 audit[2241]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2207 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235333634366137633533653531623338663864316463313666306566 Oct 2 21:23:31.192000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.192000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.192000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.192000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.192000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.192000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.192000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.192000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.192000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.192000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.192000 audit: BPF prog-id=74 op=LOAD Oct 2 21:23:31.192000 audit[2230]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001cf8e0 a2=78 a3=0 items=0 ppid=2212 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.192000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830306533383134386564303232326536626437316431613765383761 Oct 2 21:23:31.193000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.193000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.193000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.193000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.193000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.193000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.193000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.193000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.193000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.193000 audit: BPF prog-id=75 op=LOAD Oct 2 21:23:31.193000 audit[2230]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001cf670 a2=78 a3=0 items=0 ppid=2212 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.193000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830306533383134386564303232326536626437316431613765383761 Oct 2 21:23:31.193000 audit: BPF prog-id=75 op=UNLOAD Oct 2 21:23:31.194000 audit: BPF prog-id=74 op=UNLOAD Oct 2 21:23:31.194000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.194000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.194000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.194000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.194000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.194000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.194000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.194000 audit[2230]: AVC avc: denied { perfmon } for pid=2230 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.194000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.194000 audit[2230]: AVC avc: denied { bpf } for pid=2230 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.194000 audit: BPF prog-id=76 op=LOAD Oct 2 21:23:31.194000 audit[2230]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001cfb40 a2=78 a3=0 items=0 ppid=2212 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830306533383134386564303232326536626437316431613765383761 Oct 2 21:23:31.222511 systemd[1]: Started cri-containerd-670b3e32fc791ede0a6ba2d2f8e4351c8322bda574af78b8afec128682a59d1f.scope. Oct 2 21:23:31.243390 env[1353]: time="2023-10-02T21:23:31.242721236Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-74bdccafa3,Uid:71d75891f97f771c6692d820126002b8,Namespace:kube-system,Attempt:0,} returns sandbox id \"b53646a7c53e51b38f8d1dc16f0ef747ddba5242c394fa322874b91c8ee7981b\"" Oct 2 21:23:31.249759 env[1353]: time="2023-10-02T21:23:31.249701914Z" level=info msg="CreateContainer within sandbox \"b53646a7c53e51b38f8d1dc16f0ef747ddba5242c394fa322874b91c8ee7981b\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 21:23:31.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.259000 audit: BPF prog-id=77 op=LOAD Oct 2 21:23:31.260000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.260000 audit[2275]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2170 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637306233653332666337393165646530613662613264326638653433 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2170 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637306233653332666337393165646530613662613264326638653433 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit: BPF prog-id=78 op=LOAD Oct 2 21:23:31.261000 audit[2275]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2170 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637306233653332666337393165646530613662613264326638653433 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.261000 audit: BPF prog-id=79 op=LOAD Oct 2 21:23:31.261000 audit[2275]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2170 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637306233653332666337393165646530613662613264326638653433 Oct 2 21:23:31.262000 audit: BPF prog-id=79 op=UNLOAD Oct 2 21:23:31.262000 audit: BPF prog-id=78 op=UNLOAD Oct 2 21:23:31.262000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.262000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.262000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.262000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.262000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.262000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.262000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.262000 audit[2275]: AVC avc: denied { perfmon } for pid=2275 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.262000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.262000 audit[2275]: AVC avc: denied { bpf } for pid=2275 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.262000 audit: BPF prog-id=80 op=LOAD Oct 2 21:23:31.262000 audit[2275]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2170 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637306233653332666337393165646530613662613264326638653433 Oct 2 21:23:31.273109 env[1353]: time="2023-10-02T21:23:31.273065565Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-74bdccafa3,Uid:394250db9a19ad4e99100d70ba85043e,Namespace:kube-system,Attempt:0,} returns sandbox id \"800e38148ed0222e6bd71d1a7e87acb23e3f5c69a9b5a235e17869766ae3caf3\"" Oct 2 21:23:31.278013 env[1353]: time="2023-10-02T21:23:31.277979237Z" level=info msg="CreateContainer within sandbox \"800e38148ed0222e6bd71d1a7e87acb23e3f5c69a9b5a235e17869766ae3caf3\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 21:23:31.297765 env[1353]: time="2023-10-02T21:23:31.291381313Z" level=info msg="CreateContainer within sandbox \"b53646a7c53e51b38f8d1dc16f0ef747ddba5242c394fa322874b91c8ee7981b\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"10a2565aef7af8dcd30c28eeaad45d9143d6c411b3926d722ab687a748b3fcfb\"" Oct 2 21:23:31.299448 env[1353]: time="2023-10-02T21:23:31.298842355Z" level=info msg="StartContainer for \"10a2565aef7af8dcd30c28eeaad45d9143d6c411b3926d722ab687a748b3fcfb\"" Oct 2 21:23:31.299594 kubelet[2131]: I1002 21:23:31.298923 2131 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:31.299594 kubelet[2131]: E1002 21:23:31.299393 2131 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.19:6443/api/v1/nodes\": dial tcp 10.200.20.19:6443: connect: connection refused" node="ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:31.315542 env[1353]: time="2023-10-02T21:23:31.315483109Z" level=info msg="StartContainer for \"670b3e32fc791ede0a6ba2d2f8e4351c8322bda574af78b8afec128682a59d1f\" returns successfully" Oct 2 21:23:31.323345 kubelet[2131]: W1002 21:23:31.322021 2131 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:31.323345 kubelet[2131]: E1002 21:23:31.322097 2131 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 21:23:31.327424 env[1353]: time="2023-10-02T21:23:31.325104788Z" level=info msg="CreateContainer within sandbox \"800e38148ed0222e6bd71d1a7e87acb23e3f5c69a9b5a235e17869766ae3caf3\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"258cd3b79497f68c68868ca2fc46edcf732752e718589f6e541f29aaa39dcda4\"" Oct 2 21:23:31.328114 env[1353]: time="2023-10-02T21:23:31.327943256Z" level=info msg="StartContainer for \"258cd3b79497f68c68868ca2fc46edcf732752e718589f6e541f29aaa39dcda4\"" Oct 2 21:23:31.356096 systemd[1]: Started cri-containerd-10a2565aef7af8dcd30c28eeaad45d9143d6c411b3926d722ab687a748b3fcfb.scope. Oct 2 21:23:31.372478 systemd[1]: Started cri-containerd-258cd3b79497f68c68868ca2fc46edcf732752e718589f6e541f29aaa39dcda4.scope. Oct 2 21:23:31.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit: BPF prog-id=81 op=LOAD Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2207 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130613235363561656637616638646364333063323865656161643435 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2207 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130613235363561656637616638646364333063323865656161643435 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit: BPF prog-id=82 op=LOAD Oct 2 21:23:31.392000 audit[2327]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2207 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130613235363561656637616638646364333063323865656161643435 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit: BPF prog-id=83 op=LOAD Oct 2 21:23:31.392000 audit[2327]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2207 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130613235363561656637616638646364333063323865656161643435 Oct 2 21:23:31.392000 audit: BPF prog-id=83 op=UNLOAD Oct 2 21:23:31.392000 audit: BPF prog-id=82 op=UNLOAD Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.392000 audit: BPF prog-id=84 op=LOAD Oct 2 21:23:31.392000 audit[2327]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2207 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130613235363561656637616638646364333063323865656161643435 Oct 2 21:23:31.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.426000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.426000 audit: BPF prog-id=85 op=LOAD Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2212 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235386364336237393439376636386336383836386361326663343665 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2212 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235386364336237393439376636386336383836386361326663343665 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit: BPF prog-id=86 op=LOAD Oct 2 21:23:31.433000 audit[2338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2212 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235386364336237393439376636386336383836386361326663343665 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.433000 audit: BPF prog-id=87 op=LOAD Oct 2 21:23:31.433000 audit[2338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2212 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235386364336237393439376636386336383836386361326663343665 Oct 2 21:23:31.434000 audit: BPF prog-id=87 op=UNLOAD Oct 2 21:23:31.434000 audit: BPF prog-id=86 op=UNLOAD Oct 2 21:23:31.434000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.434000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.434000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.434000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.434000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.434000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.434000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.434000 audit[2338]: AVC avc: denied { perfmon } for pid=2338 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.434000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.434000 audit[2338]: AVC avc: denied { bpf } for pid=2338 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:31.434000 audit: BPF prog-id=88 op=LOAD Oct 2 21:23:31.434000 audit[2338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2212 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:31.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235386364336237393439376636386336383836386361326663343665 Oct 2 21:23:31.451110 env[1353]: time="2023-10-02T21:23:31.451061158Z" level=info msg="StartContainer for \"10a2565aef7af8dcd30c28eeaad45d9143d6c411b3926d722ab687a748b3fcfb\" returns successfully" Oct 2 21:23:31.517710 env[1353]: time="2023-10-02T21:23:31.517631693Z" level=info msg="StartContainer for \"258cd3b79497f68c68868ca2fc46edcf732752e718589f6e541f29aaa39dcda4\" returns successfully" Oct 2 21:23:32.762000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:32.762000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400036c6f0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:23:32.762000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:32.763000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:32.763000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000b76040 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:23:32.763000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:32.901735 kubelet[2131]: I1002 21:23:32.901712 2131 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:33.111000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:33.123046 kernel: kauditd_printk_skb: 563 callbacks suppressed Oct 2 21:23:33.123167 kernel: audit: type=1400 audit(1696281813.111:694): avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:33.122000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:33.192418 kernel: audit: type=1400 audit(1696281813.122:695): avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:33.122000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004e57f00 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:23:33.240637 kernel: audit: type=1300 audit(1696281813.122:695): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004e57f00 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:23:33.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:33.274213 kernel: audit: type=1327 audit(1696281813.122:695): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:33.111000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4000c1acf0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:23:33.331743 kernel: audit: type=1300 audit(1696281813.111:694): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4000c1acf0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:23:33.111000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:33.363979 kernel: audit: type=1327 audit(1696281813.111:694): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:33.150000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:33.392427 kernel: audit: type=1400 audit(1696281813.150:696): avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:33.150000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4000c1aed0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:23:33.434689 kernel: audit: type=1300 audit(1696281813.150:696): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4000c1aed0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:23:33.150000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:33.459276 kernel: audit: type=1327 audit(1696281813.150:696): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:33.155000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:33.481963 kernel: audit: type=1400 audit(1696281813.155:697): avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:33.155000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=400439f1e0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:23:33.155000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:33.156000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:33.156000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=61 a1=40038ba540 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:23:33.156000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:33.166000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:33.166000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7f a1=4000c1b560 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:23:33.166000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:23:33.507785 kubelet[2131]: E1002 21:23:33.507753 2131 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-74bdccafa3\" not found" node="ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:33.548636 kubelet[2131]: I1002 21:23:33.548604 2131 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:33.772645 kubelet[2131]: I1002 21:23:33.772520 2131 apiserver.go:52] "Watching apiserver" Oct 2 21:23:33.778188 kubelet[2131]: I1002 21:23:33.778163 2131 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 21:23:33.835576 kubelet[2131]: I1002 21:23:33.835532 2131 reconciler.go:41] "Reconciler: start to sync state" Oct 2 21:23:37.057830 systemd[1]: Reloading. Oct 2 21:23:37.174715 /usr/lib/systemd/system-generators/torcx-generator[2415]: time="2023-10-02T21:23:37Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:23:37.174742 /usr/lib/systemd/system-generators/torcx-generator[2415]: time="2023-10-02T21:23:37Z" level=info msg="torcx already run" Oct 2 21:23:37.300280 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:23:37.300303 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:23:37.318668 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit: BPF prog-id=89 op=LOAD Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.393000 audit: BPF prog-id=90 op=LOAD Oct 2 21:23:37.393000 audit: BPF prog-id=50 op=UNLOAD Oct 2 21:23:37.393000 audit: BPF prog-id=51 op=UNLOAD Oct 2 21:23:37.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.394000 audit: BPF prog-id=91 op=LOAD Oct 2 21:23:37.394000 audit: BPF prog-id=52 op=UNLOAD Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit: BPF prog-id=92 op=LOAD Oct 2 21:23:37.395000 audit: BPF prog-id=81 op=UNLOAD Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.396000 audit: BPF prog-id=93 op=LOAD Oct 2 21:23:37.396000 audit: BPF prog-id=65 op=UNLOAD Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit: BPF prog-id=94 op=LOAD Oct 2 21:23:37.397000 audit: BPF prog-id=53 op=UNLOAD Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit: BPF prog-id=95 op=LOAD Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.397000 audit: BPF prog-id=96 op=LOAD Oct 2 21:23:37.397000 audit: BPF prog-id=54 op=UNLOAD Oct 2 21:23:37.397000 audit: BPF prog-id=55 op=UNLOAD Oct 2 21:23:37.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.398000 audit: BPF prog-id=97 op=LOAD Oct 2 21:23:37.398000 audit: BPF prog-id=85 op=UNLOAD Oct 2 21:23:37.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.399000 audit: BPF prog-id=98 op=LOAD Oct 2 21:23:37.399000 audit: BPF prog-id=69 op=UNLOAD Oct 2 21:23:37.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit: BPF prog-id=99 op=LOAD Oct 2 21:23:37.401000 audit: BPF prog-id=56 op=UNLOAD Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit: BPF prog-id=100 op=LOAD Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.401000 audit: BPF prog-id=101 op=LOAD Oct 2 21:23:37.401000 audit: BPF prog-id=57 op=UNLOAD Oct 2 21:23:37.401000 audit: BPF prog-id=58 op=UNLOAD Oct 2 21:23:37.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.403000 audit: BPF prog-id=102 op=LOAD Oct 2 21:23:37.403000 audit: BPF prog-id=59 op=UNLOAD Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit: BPF prog-id=103 op=LOAD Oct 2 21:23:37.404000 audit: BPF prog-id=77 op=UNLOAD Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.405000 audit: BPF prog-id=104 op=LOAD Oct 2 21:23:37.405000 audit: BPF prog-id=60 op=UNLOAD Oct 2 21:23:37.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.405000 audit: BPF prog-id=105 op=LOAD Oct 2 21:23:37.405000 audit: BPF prog-id=70 op=UNLOAD Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit: BPF prog-id=106 op=LOAD Oct 2 21:23:37.406000 audit: BPF prog-id=61 op=UNLOAD Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit: BPF prog-id=107 op=LOAD Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.406000 audit: BPF prog-id=108 op=LOAD Oct 2 21:23:37.406000 audit: BPF prog-id=62 op=UNLOAD Oct 2 21:23:37.406000 audit: BPF prog-id=63 op=UNLOAD Oct 2 21:23:37.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.407000 audit: BPF prog-id=109 op=LOAD Oct 2 21:23:37.407000 audit: BPF prog-id=64 op=UNLOAD Oct 2 21:23:37.431511 systemd[1]: Stopping kubelet.service... Oct 2 21:23:37.458659 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 21:23:37.459024 systemd[1]: Stopped kubelet.service. Oct 2 21:23:37.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:37.459295 systemd[1]: kubelet.service: Consumed 1.618s CPU time. Oct 2 21:23:37.461756 systemd[1]: Started kubelet.service. Oct 2 21:23:37.463000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:37.570080 kubelet[2475]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:23:37.570080 kubelet[2475]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 21:23:37.570080 kubelet[2475]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:23:37.574316 kubelet[2475]: I1002 21:23:37.574268 2475 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 21:23:37.580252 kubelet[2475]: I1002 21:23:37.580214 2475 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 21:23:37.580373 kubelet[2475]: I1002 21:23:37.580362 2475 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 21:23:37.580625 kubelet[2475]: I1002 21:23:37.580609 2475 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 21:23:37.582166 kubelet[2475]: I1002 21:23:37.582146 2475 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 21:23:37.583873 kubelet[2475]: I1002 21:23:37.583856 2475 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 21:23:37.586192 kubelet[2475]: W1002 21:23:37.586166 2475 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 21:23:37.586968 kubelet[2475]: I1002 21:23:37.586950 2475 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 21:23:37.587210 kubelet[2475]: I1002 21:23:37.587197 2475 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 21:23:37.587302 kubelet[2475]: I1002 21:23:37.587287 2475 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 21:23:37.587382 kubelet[2475]: I1002 21:23:37.587356 2475 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 21:23:37.587382 kubelet[2475]: I1002 21:23:37.587367 2475 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 21:23:37.587436 kubelet[2475]: I1002 21:23:37.587418 2475 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:23:37.592150 kubelet[2475]: I1002 21:23:37.592128 2475 kubelet.go:405] "Attempting to sync node with API server" Oct 2 21:23:37.593031 kubelet[2475]: I1002 21:23:37.592962 2475 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 21:23:37.593031 kubelet[2475]: I1002 21:23:37.593024 2475 kubelet.go:309] "Adding apiserver pod source" Oct 2 21:23:37.593099 kubelet[2475]: I1002 21:23:37.593063 2475 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 21:23:37.602535 kubelet[2475]: I1002 21:23:37.602501 2475 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 21:23:37.603303 kubelet[2475]: I1002 21:23:37.603282 2475 server.go:1168] "Started kubelet" Oct 2 21:23:37.605000 audit[2475]: AVC avc: denied { mac_admin } for pid=2475 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.605000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:23:37.605000 audit[2475]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400094c210 a1=4000197d88 a2=400094c1e0 a3=25 items=0 ppid=1 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:37.605000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:23:37.605645 kubelet[2475]: I1002 21:23:37.605413 2475 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 21:23:37.605645 kubelet[2475]: I1002 21:23:37.605449 2475 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 21:23:37.605645 kubelet[2475]: I1002 21:23:37.605524 2475 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 21:23:37.605000 audit[2475]: AVC avc: denied { mac_admin } for pid=2475 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.605000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:23:37.605000 audit[2475]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000634b00 a1=4000197db8 a2=400094c2a0 a3=25 items=0 ppid=1 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:37.605000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:23:37.609579 kubelet[2475]: E1002 21:23:37.609538 2475 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 21:23:37.609579 kubelet[2475]: E1002 21:23:37.609577 2475 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 21:23:37.622503 kubelet[2475]: I1002 21:23:37.622452 2475 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 21:23:37.623427 kubelet[2475]: I1002 21:23:37.623386 2475 server.go:461] "Adding debug handlers to kubelet server" Oct 2 21:23:37.624669 kubelet[2475]: I1002 21:23:37.624638 2475 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 21:23:37.626022 kubelet[2475]: I1002 21:23:37.625980 2475 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 21:23:37.626566 kubelet[2475]: I1002 21:23:37.626515 2475 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 21:23:37.651000 audit[2490]: USER_ACCT pid=2490 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:37.651552 sudo[2490]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 21:23:37.651000 audit[2490]: CRED_REFR pid=2490 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:37.651771 sudo[2490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 21:23:37.655000 audit[2490]: USER_START pid=2490 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:37.699694 kubelet[2475]: I1002 21:23:37.699650 2475 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 21:23:37.702783 kubelet[2475]: I1002 21:23:37.702755 2475 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 21:23:37.703017 kubelet[2475]: I1002 21:23:37.703005 2475 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 21:23:37.703097 kubelet[2475]: I1002 21:23:37.703087 2475 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 21:23:37.703214 kubelet[2475]: E1002 21:23:37.703204 2475 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 21:23:37.742400 kubelet[2475]: I1002 21:23:37.742374 2475 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:37.767000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 21:23:37.767000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40011fec80 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:23:37.767000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:37.769146 kubelet[2475]: I1002 21:23:37.769126 2475 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:37.769331 kubelet[2475]: I1002 21:23:37.769313 2475 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:37.804954 kubelet[2475]: E1002 21:23:37.804140 2475 kubelet.go:2281] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 21:23:37.816058 kubelet[2475]: I1002 21:23:37.815442 2475 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 21:23:37.816058 kubelet[2475]: I1002 21:23:37.815474 2475 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 21:23:37.816058 kubelet[2475]: I1002 21:23:37.815509 2475 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:23:37.816058 kubelet[2475]: I1002 21:23:37.815648 2475 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 21:23:37.816058 kubelet[2475]: I1002 21:23:37.815661 2475 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 21:23:37.816058 kubelet[2475]: I1002 21:23:37.815668 2475 policy_none.go:49] "None policy: Start" Oct 2 21:23:37.816433 kubelet[2475]: I1002 21:23:37.816288 2475 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 21:23:37.816433 kubelet[2475]: I1002 21:23:37.816314 2475 state_mem.go:35] "Initializing new in-memory state store" Oct 2 21:23:37.817078 kubelet[2475]: I1002 21:23:37.816510 2475 state_mem.go:75] "Updated machine memory state" Oct 2 21:23:37.827000 audit[2475]: AVC avc: denied { mac_admin } for pid=2475 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:37.827000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:23:37.827000 audit[2475]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000faa8d0 a1=40010685b8 a2=4000faa8a0 a3=25 items=0 ppid=1 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:37.827000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:23:37.827846 kubelet[2475]: I1002 21:23:37.827452 2475 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 21:23:37.827846 kubelet[2475]: I1002 21:23:37.827526 2475 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 21:23:37.829878 kubelet[2475]: I1002 21:23:37.828197 2475 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 21:23:38.005238 kubelet[2475]: I1002 21:23:38.005193 2475 topology_manager.go:212] "Topology Admit Handler" Oct 2 21:23:38.005513 kubelet[2475]: I1002 21:23:38.005498 2475 topology_manager.go:212] "Topology Admit Handler" Oct 2 21:23:38.005632 kubelet[2475]: I1002 21:23:38.005619 2475 topology_manager.go:212] "Topology Admit Handler" Oct 2 21:23:38.015480 kubelet[2475]: W1002 21:23:38.015452 2475 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 21:23:38.018828 kubelet[2475]: W1002 21:23:38.018783 2475 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 21:23:38.021813 kubelet[2475]: W1002 21:23:38.021783 2475 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 21:23:38.036749 kubelet[2475]: I1002 21:23:38.036719 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/948a25608564ea9b10c5853286875c00-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-74bdccafa3\" (UID: \"948a25608564ea9b10c5853286875c00\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:38.036974 kubelet[2475]: I1002 21:23:38.036944 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/948a25608564ea9b10c5853286875c00-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-74bdccafa3\" (UID: \"948a25608564ea9b10c5853286875c00\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:38.037111 kubelet[2475]: I1002 21:23:38.037100 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/948a25608564ea9b10c5853286875c00-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-74bdccafa3\" (UID: \"948a25608564ea9b10c5853286875c00\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:38.037204 kubelet[2475]: I1002 21:23:38.037195 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/71d75891f97f771c6692d820126002b8-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-74bdccafa3\" (UID: \"71d75891f97f771c6692d820126002b8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:38.037329 kubelet[2475]: I1002 21:23:38.037319 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/948a25608564ea9b10c5853286875c00-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-74bdccafa3\" (UID: \"948a25608564ea9b10c5853286875c00\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:38.037444 kubelet[2475]: I1002 21:23:38.037435 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/948a25608564ea9b10c5853286875c00-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-74bdccafa3\" (UID: \"948a25608564ea9b10c5853286875c00\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:38.037565 kubelet[2475]: I1002 21:23:38.037555 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/394250db9a19ad4e99100d70ba85043e-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-74bdccafa3\" (UID: \"394250db9a19ad4e99100d70ba85043e\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:38.037702 kubelet[2475]: I1002 21:23:38.037691 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/71d75891f97f771c6692d820126002b8-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-74bdccafa3\" (UID: \"71d75891f97f771c6692d820126002b8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:38.037811 kubelet[2475]: I1002 21:23:38.037802 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/71d75891f97f771c6692d820126002b8-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-74bdccafa3\" (UID: \"71d75891f97f771c6692d820126002b8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:38.243477 sudo[2490]: pam_unix(sudo:session): session closed for user root Oct 2 21:23:38.263384 kernel: kauditd_printk_skb: 272 callbacks suppressed Oct 2 21:23:38.263465 kernel: audit: type=1106 audit(1696281818.243:953): pid=2490 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:38.243000 audit[2490]: USER_END pid=2490 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:38.243000 audit[2490]: CRED_DISP pid=2490 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:38.290840 kernel: audit: type=1104 audit(1696281818.243:954): pid=2490 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:38.593838 kubelet[2475]: I1002 21:23:38.593708 2475 apiserver.go:52] "Watching apiserver" Oct 2 21:23:38.627354 kubelet[2475]: I1002 21:23:38.627311 2475 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 21:23:38.641571 kubelet[2475]: I1002 21:23:38.641546 2475 reconciler.go:41] "Reconciler: start to sync state" Oct 2 21:23:38.779695 kubelet[2475]: W1002 21:23:38.779666 2475 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 21:23:38.779844 kubelet[2475]: E1002 21:23:38.779722 2475 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-74bdccafa3\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-74bdccafa3" Oct 2 21:23:38.793665 kubelet[2475]: I1002 21:23:38.793629 2475 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74bdccafa3" podStartSLOduration=0.793583008 podCreationTimestamp="2023-10-02 21:23:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:23:38.791682528 +0000 UTC m=+1.317459063" watchObservedRunningTime="2023-10-02 21:23:38.793583008 +0000 UTC m=+1.319359543" Oct 2 21:23:38.816337 kubelet[2475]: I1002 21:23:38.816286 2475 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-74bdccafa3" podStartSLOduration=0.816225059 podCreationTimestamp="2023-10-02 21:23:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:23:38.799521833 +0000 UTC m=+1.325298368" watchObservedRunningTime="2023-10-02 21:23:38.816225059 +0000 UTC m=+1.342001554" Oct 2 21:23:38.826248 kubelet[2475]: I1002 21:23:38.826205 2475 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-74bdccafa3" podStartSLOduration=0.826165432 podCreationTimestamp="2023-10-02 21:23:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:23:38.816631993 +0000 UTC m=+1.342408528" watchObservedRunningTime="2023-10-02 21:23:38.826165432 +0000 UTC m=+1.351941967" Oct 2 21:23:39.668011 sudo[1721]: pam_unix(sudo:session): session closed for user root Oct 2 21:23:39.667000 audit[1721]: USER_END pid=1721 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:39.691305 kernel: audit: type=1106 audit(1696281819.667:955): pid=1721 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:39.691512 kernel: audit: type=1104 audit(1696281819.673:956): pid=1721 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:39.673000 audit[1721]: CRED_DISP pid=1721 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:23:39.778448 sshd[1652]: pam_unix(sshd:session): session closed for user core Oct 2 21:23:39.779000 audit[1652]: USER_END pid=1652 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:23:39.779000 audit[1652]: CRED_DISP pid=1652 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:23:39.808335 systemd[1]: sshd@6-10.200.20.19:22-10.200.12.6:51028.service: Deactivated successfully. Oct 2 21:23:39.809789 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 21:23:39.810078 systemd[1]: session-9.scope: Consumed 6.945s CPU time. Oct 2 21:23:39.812536 systemd-logind[1338]: Session 9 logged out. Waiting for processes to exit. Oct 2 21:23:39.813965 systemd-logind[1338]: Removed session 9. Oct 2 21:23:39.839242 kernel: audit: type=1106 audit(1696281819.779:957): pid=1652 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:23:39.839376 kernel: audit: type=1104 audit(1696281819.779:958): pid=1652 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:23:39.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.19:22-10.200.12.6:51028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:39.860457 kernel: audit: type=1131 audit(1696281819.808:959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.19:22-10.200.12.6:51028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:23:50.407000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:50.407000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c6e400 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:23:50.474128 kernel: audit: type=1400 audit(1696281830.407:960): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:50.474276 kernel: audit: type=1300 audit(1696281830.407:960): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c6e400 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:23:50.407000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:50.500868 kernel: audit: type=1327 audit(1696281830.407:960): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:50.407000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:50.535581 kernel: audit: type=1400 audit(1696281830.407:961): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:50.407000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c6e5c0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:23:50.568290 kernel: audit: type=1300 audit(1696281830.407:961): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c6e5c0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:23:50.407000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:50.596425 kernel: audit: type=1327 audit(1696281830.407:961): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:50.407000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:50.636206 kernel: audit: type=1400 audit(1696281830.407:962): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:50.407000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c6e700 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:23:50.666987 kernel: audit: type=1300 audit(1696281830.407:962): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c6e700 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:23:50.667183 kernel: audit: type=1327 audit(1696281830.407:962): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:50.407000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:50.407000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:50.723775 kernel: audit: type=1400 audit(1696281830.407:963): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:23:50.407000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c6e840 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:23:50.407000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:23:50.739295 kubelet[2475]: I1002 21:23:50.739256 2475 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 21:23:50.740034 env[1353]: time="2023-10-02T21:23:50.739941331Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 21:23:50.740536 kubelet[2475]: I1002 21:23:50.740519 2475 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 21:23:51.234022 kubelet[2475]: I1002 21:23:51.233960 2475 topology_manager.go:212] "Topology Admit Handler" Oct 2 21:23:51.238790 systemd[1]: Created slice kubepods-burstable-pod4daf26a8_9c4d_49c0_8fa8_cfc59855696c.slice. Oct 2 21:23:51.243975 kubelet[2475]: I1002 21:23:51.243931 2475 topology_manager.go:212] "Topology Admit Handler" Oct 2 21:23:51.248711 systemd[1]: Created slice kubepods-besteffort-podce5cdd4e_e748_42ae_b306_0a63e2fe71cc.slice. Oct 2 21:23:51.251840 kubelet[2475]: W1002 21:23:51.251807 2475 reflector.go:533] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ci-3510.3.0-a-74bdccafa3" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-74bdccafa3' and this object Oct 2 21:23:51.252057 kubelet[2475]: E1002 21:23:51.252026 2475 reflector.go:148] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ci-3510.3.0-a-74bdccafa3" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-74bdccafa3' and this object Oct 2 21:23:51.253469 kubelet[2475]: W1002 21:23:51.253194 2475 reflector.go:533] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ci-3510.3.0-a-74bdccafa3" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-74bdccafa3' and this object Oct 2 21:23:51.253566 kubelet[2475]: E1002 21:23:51.253482 2475 reflector.go:148] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ci-3510.3.0-a-74bdccafa3" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-74bdccafa3' and this object Oct 2 21:23:51.406749 kubelet[2475]: I1002 21:23:51.406702 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cni-path\") pod \"cilium-6djhc\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " pod="kube-system/cilium-6djhc" Oct 2 21:23:51.406930 kubelet[2475]: I1002 21:23:51.406768 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-lib-modules\") pod \"cilium-6djhc\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " pod="kube-system/cilium-6djhc" Oct 2 21:23:51.406930 kubelet[2475]: I1002 21:23:51.406791 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ce5cdd4e-e748-42ae-b306-0a63e2fe71cc-xtables-lock\") pod \"kube-proxy-lbq9w\" (UID: \"ce5cdd4e-e748-42ae-b306-0a63e2fe71cc\") " pod="kube-system/kube-proxy-lbq9w" Oct 2 21:23:51.406930 kubelet[2475]: I1002 21:23:51.406810 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-bpf-maps\") pod \"cilium-6djhc\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " pod="kube-system/cilium-6djhc" Oct 2 21:23:51.406930 kubelet[2475]: I1002 21:23:51.406830 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-etc-cni-netd\") pod \"cilium-6djhc\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " pod="kube-system/cilium-6djhc" Oct 2 21:23:51.406930 kubelet[2475]: I1002 21:23:51.406870 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cilium-config-path\") pod \"cilium-6djhc\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " pod="kube-system/cilium-6djhc" Oct 2 21:23:51.406930 kubelet[2475]: I1002 21:23:51.406890 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-host-proc-sys-net\") pod \"cilium-6djhc\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " pod="kube-system/cilium-6djhc" Oct 2 21:23:51.407117 kubelet[2475]: I1002 21:23:51.406911 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-hostproc\") pod \"cilium-6djhc\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " pod="kube-system/cilium-6djhc" Oct 2 21:23:51.407117 kubelet[2475]: I1002 21:23:51.406949 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-hubble-tls\") pod \"cilium-6djhc\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " pod="kube-system/cilium-6djhc" Oct 2 21:23:51.407117 kubelet[2475]: I1002 21:23:51.406970 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-host-proc-sys-kernel\") pod \"cilium-6djhc\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " pod="kube-system/cilium-6djhc" Oct 2 21:23:51.407117 kubelet[2475]: I1002 21:23:51.406994 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/ce5cdd4e-e748-42ae-b306-0a63e2fe71cc-kube-proxy\") pod \"kube-proxy-lbq9w\" (UID: \"ce5cdd4e-e748-42ae-b306-0a63e2fe71cc\") " pod="kube-system/kube-proxy-lbq9w" Oct 2 21:23:51.407117 kubelet[2475]: I1002 21:23:51.407027 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ce5cdd4e-e748-42ae-b306-0a63e2fe71cc-lib-modules\") pod \"kube-proxy-lbq9w\" (UID: \"ce5cdd4e-e748-42ae-b306-0a63e2fe71cc\") " pod="kube-system/kube-proxy-lbq9w" Oct 2 21:23:51.407289 kubelet[2475]: I1002 21:23:51.407050 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xrw8b\" (UniqueName: \"kubernetes.io/projected/ce5cdd4e-e748-42ae-b306-0a63e2fe71cc-kube-api-access-xrw8b\") pod \"kube-proxy-lbq9w\" (UID: \"ce5cdd4e-e748-42ae-b306-0a63e2fe71cc\") " pod="kube-system/kube-proxy-lbq9w" Oct 2 21:23:51.407289 kubelet[2475]: I1002 21:23:51.407070 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tqbkj\" (UniqueName: \"kubernetes.io/projected/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-kube-api-access-tqbkj\") pod \"cilium-6djhc\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " pod="kube-system/cilium-6djhc" Oct 2 21:23:51.407289 kubelet[2475]: I1002 21:23:51.407105 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cilium-run\") pod \"cilium-6djhc\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " pod="kube-system/cilium-6djhc" Oct 2 21:23:51.407289 kubelet[2475]: I1002 21:23:51.407129 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cilium-cgroup\") pod \"cilium-6djhc\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " pod="kube-system/cilium-6djhc" Oct 2 21:23:51.407289 kubelet[2475]: I1002 21:23:51.407150 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-xtables-lock\") pod \"cilium-6djhc\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " pod="kube-system/cilium-6djhc" Oct 2 21:23:51.407429 kubelet[2475]: I1002 21:23:51.407188 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-clustermesh-secrets\") pod \"cilium-6djhc\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " pod="kube-system/cilium-6djhc" Oct 2 21:23:51.561168 env[1353]: time="2023-10-02T21:23:51.560685641Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-lbq9w,Uid:ce5cdd4e-e748-42ae-b306-0a63e2fe71cc,Namespace:kube-system,Attempt:0,}" Oct 2 21:23:51.577706 kubelet[2475]: I1002 21:23:51.577663 2475 topology_manager.go:212] "Topology Admit Handler" Oct 2 21:23:51.585985 systemd[1]: Created slice kubepods-besteffort-pod4fc7b856_9289_41d5_bd09_f9041bca7787.slice. Oct 2 21:23:51.599224 env[1353]: time="2023-10-02T21:23:51.599144229Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:23:51.599460 env[1353]: time="2023-10-02T21:23:51.599434255Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:23:51.599595 env[1353]: time="2023-10-02T21:23:51.599571569Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:23:51.600343 env[1353]: time="2023-10-02T21:23:51.600301014Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/43c4d50d4ae7a72af76405efa5c4d4b2778facc91c66181fe3d242b2e3fad182 pid=2547 runtime=io.containerd.runc.v2 Oct 2 21:23:51.642015 systemd[1]: Started cri-containerd-43c4d50d4ae7a72af76405efa5c4d4b2778facc91c66181fe3d242b2e3fad182.scope. Oct 2 21:23:51.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.658000 audit: BPF prog-id=110 op=LOAD Oct 2 21:23:51.658000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.658000 audit[2559]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2547 pid=2559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433633464353064346165376137326166373634303565666135633464 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2547 pid=2559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433633464353064346165376137326166373634303565666135633464 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit: BPF prog-id=111 op=LOAD Oct 2 21:23:51.659000 audit[2559]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2547 pid=2559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433633464353064346165376137326166373634303565666135633464 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.659000 audit: BPF prog-id=112 op=LOAD Oct 2 21:23:51.659000 audit[2559]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2547 pid=2559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433633464353064346165376137326166373634303565666135633464 Oct 2 21:23:51.660000 audit: BPF prog-id=112 op=UNLOAD Oct 2 21:23:51.660000 audit: BPF prog-id=111 op=UNLOAD Oct 2 21:23:51.660000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.660000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.660000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.660000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.660000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.660000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.660000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.660000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.660000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.660000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.660000 audit: BPF prog-id=113 op=LOAD Oct 2 21:23:51.660000 audit[2559]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2547 pid=2559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433633464353064346165376137326166373634303565666135633464 Oct 2 21:23:51.676207 env[1353]: time="2023-10-02T21:23:51.676169280Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-lbq9w,Uid:ce5cdd4e-e748-42ae-b306-0a63e2fe71cc,Namespace:kube-system,Attempt:0,} returns sandbox id \"43c4d50d4ae7a72af76405efa5c4d4b2778facc91c66181fe3d242b2e3fad182\"" Oct 2 21:23:51.681089 env[1353]: time="2023-10-02T21:23:51.681049850Z" level=info msg="CreateContainer within sandbox \"43c4d50d4ae7a72af76405efa5c4d4b2778facc91c66181fe3d242b2e3fad182\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 21:23:51.710881 kubelet[2475]: I1002 21:23:51.710803 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4fc7b856-9289-41d5-bd09-f9041bca7787-cilium-config-path\") pod \"cilium-operator-574c4bb98d-fn25d\" (UID: \"4fc7b856-9289-41d5-bd09-f9041bca7787\") " pod="kube-system/cilium-operator-574c4bb98d-fn25d" Oct 2 21:23:51.711173 kubelet[2475]: I1002 21:23:51.711136 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wrrcg\" (UniqueName: \"kubernetes.io/projected/4fc7b856-9289-41d5-bd09-f9041bca7787-kube-api-access-wrrcg\") pod \"cilium-operator-574c4bb98d-fn25d\" (UID: \"4fc7b856-9289-41d5-bd09-f9041bca7787\") " pod="kube-system/cilium-operator-574c4bb98d-fn25d" Oct 2 21:23:51.711898 env[1353]: time="2023-10-02T21:23:51.711857639Z" level=info msg="CreateContainer within sandbox \"43c4d50d4ae7a72af76405efa5c4d4b2778facc91c66181fe3d242b2e3fad182\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"fb78615064b5a240c667a2a9b1a4cf390d502828b4989487d73da135b15d6857\"" Oct 2 21:23:51.713040 env[1353]: time="2023-10-02T21:23:51.712993025Z" level=info msg="StartContainer for \"fb78615064b5a240c667a2a9b1a4cf390d502828b4989487d73da135b15d6857\"" Oct 2 21:23:51.740853 systemd[1]: Started cri-containerd-fb78615064b5a240c667a2a9b1a4cf390d502828b4989487d73da135b15d6857.scope. Oct 2 21:23:51.763000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.763000 audit[2590]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2547 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662373836313530363462356132343063363637613261396231613463 Oct 2 21:23:51.763000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.763000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.763000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.763000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.763000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.763000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.763000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.763000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.763000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.763000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.763000 audit: BPF prog-id=114 op=LOAD Oct 2 21:23:51.763000 audit[2590]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2547 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662373836313530363462356132343063363637613261396231613463 Oct 2 21:23:51.765000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.765000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.765000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.765000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.765000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.765000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.765000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.765000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.765000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.765000 audit: BPF prog-id=115 op=LOAD Oct 2 21:23:51.765000 audit[2590]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2547 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662373836313530363462356132343063363637613261396231613463 Oct 2 21:23:51.766000 audit: BPF prog-id=115 op=UNLOAD Oct 2 21:23:51.766000 audit: BPF prog-id=114 op=UNLOAD Oct 2 21:23:51.766000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.766000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.766000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.766000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.766000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.766000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.766000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.766000 audit[2590]: AVC avc: denied { perfmon } for pid=2590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.766000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.766000 audit[2590]: AVC avc: denied { bpf } for pid=2590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.766000 audit: BPF prog-id=116 op=LOAD Oct 2 21:23:51.766000 audit[2590]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2547 pid=2590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662373836313530363462356132343063363637613261396231613463 Oct 2 21:23:51.791897 env[1353]: time="2023-10-02T21:23:51.791839951Z" level=info msg="StartContainer for \"fb78615064b5a240c667a2a9b1a4cf390d502828b4989487d73da135b15d6857\" returns successfully" Oct 2 21:23:51.805742 kubelet[2475]: I1002 21:23:51.805709 2475 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-lbq9w" podStartSLOduration=0.805671859 podCreationTimestamp="2023-10-02 21:23:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:23:51.80544911 +0000 UTC m=+14.331225645" watchObservedRunningTime="2023-10-02 21:23:51.805671859 +0000 UTC m=+14.331448434" Oct 2 21:23:51.893859 env[1353]: time="2023-10-02T21:23:51.893813947Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-fn25d,Uid:4fc7b856-9289-41d5-bd09-f9041bca7787,Namespace:kube-system,Attempt:0,}" Oct 2 21:23:51.898000 audit[2639]: NETFILTER_CFG table=mangle:41 family=2 entries=1 op=nft_register_chain pid=2639 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.898000 audit[2639]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd45e2b20 a2=0 a3=ffff8ebba6c0 items=0 ppid=2600 pid=2639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.898000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 21:23:51.912000 audit[2640]: NETFILTER_CFG table=mangle:42 family=10 entries=1 op=nft_register_chain pid=2640 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.912000 audit[2640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe3706d00 a2=0 a3=ffffa128a6c0 items=0 ppid=2600 pid=2640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.912000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 21:23:51.915000 audit[2641]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_chain pid=2641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.915000 audit[2641]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc6d1a090 a2=0 a3=ffff999ec6c0 items=0 ppid=2600 pid=2641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.915000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 21:23:51.917000 audit[2642]: NETFILTER_CFG table=nat:44 family=10 entries=1 op=nft_register_chain pid=2642 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.917000 audit[2642]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc773c790 a2=0 a3=ffffb8f246c0 items=0 ppid=2600 pid=2642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.917000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 21:23:51.920000 audit[2643]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=2643 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:51.920000 audit[2643]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc1f280c0 a2=0 a3=ffff9d4af6c0 items=0 ppid=2600 pid=2643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.920000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 21:23:51.922000 audit[2644]: NETFILTER_CFG table=filter:46 family=10 entries=1 op=nft_register_chain pid=2644 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:51.922000 audit[2644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc092f990 a2=0 a3=ffffa2f3c6c0 items=0 ppid=2600 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.922000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 21:23:51.935134 env[1353]: time="2023-10-02T21:23:51.935057803Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:23:51.935297 env[1353]: time="2023-10-02T21:23:51.935151919Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:23:51.935297 env[1353]: time="2023-10-02T21:23:51.935177758Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:23:51.935502 env[1353]: time="2023-10-02T21:23:51.935435506Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4 pid=2654 runtime=io.containerd.runc.v2 Oct 2 21:23:51.951500 systemd[1]: Started cri-containerd-ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4.scope. Oct 2 21:23:51.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.972000 audit: BPF prog-id=117 op=LOAD Oct 2 21:23:51.972000 audit[2664]: AVC avc: denied { bpf } for pid=2664 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.972000 audit[2664]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2654 pid=2664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563656532366532643436346433356631653032633962313832363130 Oct 2 21:23:51.973000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.973000 audit[2664]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2654 pid=2664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563656532366532643436346433356631653032633962313832363130 Oct 2 21:23:51.973000 audit[2664]: AVC avc: denied { bpf } for pid=2664 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.973000 audit[2664]: AVC avc: denied { bpf } for pid=2664 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.973000 audit[2664]: AVC avc: denied { bpf } for pid=2664 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.973000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.973000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.973000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.973000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.973000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.973000 audit[2664]: AVC avc: denied { bpf } for pid=2664 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.973000 audit[2664]: AVC avc: denied { bpf } for pid=2664 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.973000 audit: BPF prog-id=118 op=LOAD Oct 2 21:23:51.973000 audit[2664]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2654 pid=2664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563656532366532643436346433356631653032633962313832363130 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { bpf } for pid=2664 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { bpf } for pid=2664 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { bpf } for pid=2664 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { bpf } for pid=2664 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit: BPF prog-id=119 op=LOAD Oct 2 21:23:51.974000 audit[2664]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2654 pid=2664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563656532366532643436346433356631653032633962313832363130 Oct 2 21:23:51.974000 audit: BPF prog-id=119 op=UNLOAD Oct 2 21:23:51.974000 audit: BPF prog-id=118 op=UNLOAD Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { bpf } for pid=2664 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { bpf } for pid=2664 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { bpf } for pid=2664 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { perfmon } for pid=2664 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { bpf } for pid=2664 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit[2664]: AVC avc: denied { bpf } for pid=2664 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:51.974000 audit: BPF prog-id=120 op=LOAD Oct 2 21:23:51.974000 audit[2664]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2654 pid=2664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:51.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563656532366532643436346433356631653032633962313832363130 Oct 2 21:23:52.000020 env[1353]: time="2023-10-02T21:23:51.999962026Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-fn25d,Uid:4fc7b856-9289-41d5-bd09-f9041bca7787,Namespace:kube-system,Attempt:0,} returns sandbox id \"ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4\"" Oct 2 21:23:52.002430 env[1353]: time="2023-10-02T21:23:52.002394912Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 21:23:52.006000 audit[2689]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2689 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.006000 audit[2689]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc4bc0dd0 a2=0 a3=ffff8e65d6c0 items=0 ppid=2600 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.006000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 21:23:52.016000 audit[2691]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2691 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.016000 audit[2691]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe802ecc0 a2=0 a3=ffffbf4946c0 items=0 ppid=2600 pid=2691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.016000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 21:23:52.027000 audit[2694]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2694 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.027000 audit[2694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffa07b8d0 a2=0 a3=ffff9ab546c0 items=0 ppid=2600 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.027000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 21:23:52.029000 audit[2695]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_chain pid=2695 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.029000 audit[2695]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd4022200 a2=0 a3=ffffabd256c0 items=0 ppid=2600 pid=2695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.029000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 21:23:52.033000 audit[2697]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2697 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.033000 audit[2697]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc08ecf70 a2=0 a3=ffff892486c0 items=0 ppid=2600 pid=2697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.033000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 21:23:52.035000 audit[2698]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.035000 audit[2698]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff2e6d290 a2=0 a3=ffffb4dfa6c0 items=0 ppid=2600 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.035000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 21:23:52.039000 audit[2700]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.039000 audit[2700]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffffdcd2c70 a2=0 a3=ffff8a1b26c0 items=0 ppid=2600 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.039000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 21:23:52.044000 audit[2703]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2703 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.044000 audit[2703]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff8cf3380 a2=0 a3=ffffad4246c0 items=0 ppid=2600 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.044000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 21:23:52.046000 audit[2704]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_chain pid=2704 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.046000 audit[2704]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffad46a10 a2=0 a3=ffff874de6c0 items=0 ppid=2600 pid=2704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.046000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 21:23:52.050000 audit[2706]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2706 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.050000 audit[2706]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdb4cdbb0 a2=0 a3=ffff936dd6c0 items=0 ppid=2600 pid=2706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.050000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 21:23:52.052000 audit[2707]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_chain pid=2707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.052000 audit[2707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff7fd0660 a2=0 a3=ffffa518a6c0 items=0 ppid=2600 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.052000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 21:23:52.056000 audit[2709]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.056000 audit[2709]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffefbe5a40 a2=0 a3=ffff95f516c0 items=0 ppid=2600 pid=2709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.056000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 21:23:52.062000 audit[2712]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.062000 audit[2712]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe14aa7b0 a2=0 a3=ffffb8a1c6c0 items=0 ppid=2600 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.062000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 21:23:52.068000 audit[2715]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.068000 audit[2715]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffda86d130 a2=0 a3=ffffbcb346c0 items=0 ppid=2600 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.068000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 21:23:52.069000 audit[2716]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2716 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.069000 audit[2716]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdbc7fbb0 a2=0 a3=ffffa15fd6c0 items=0 ppid=2600 pid=2716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.069000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 21:23:52.074000 audit[2718]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2718 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.074000 audit[2718]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffcbd71970 a2=0 a3=ffffb5a336c0 items=0 ppid=2600 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.074000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:23:52.079000 audit[2721]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2721 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.079000 audit[2721]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcce0d9d0 a2=0 a3=ffffbb7106c0 items=0 ppid=2600 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.079000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:23:52.089000 audit[2726]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_chain pid=2726 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.089000 audit[2726]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffddfc95e0 a2=0 a3=ffffa5daa6c0 items=0 ppid=2600 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.089000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 21:23:52.093000 audit[2728]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_rule pid=2728 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:23:52.093000 audit[2728]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd8c82620 a2=0 a3=ffff92e4f6c0 items=0 ppid=2600 pid=2728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.093000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 21:23:52.167000 audit[2730]: NETFILTER_CFG table=filter:66 family=2 entries=8 op=nft_register_rule pid=2730 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 21:23:52.167000 audit[2730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=fffff397f800 a2=0 a3=ffff9607d6c0 items=0 ppid=2600 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.167000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:23:52.312000 audit[2730]: NETFILTER_CFG table=nat:67 family=2 entries=14 op=nft_register_chain pid=2730 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 21:23:52.312000 audit[2730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=fffff397f800 a2=0 a3=ffff9607d6c0 items=0 ppid=2600 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.312000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:23:52.317000 audit[2735]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2735 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.317000 audit[2735]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffdef52a30 a2=0 a3=ffff838d56c0 items=0 ppid=2600 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.317000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 21:23:52.324000 audit[2737]: NETFILTER_CFG table=filter:69 family=10 entries=2 op=nft_register_chain pid=2737 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.324000 audit[2737]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff52b9ff0 a2=0 a3=ffff9f3966c0 items=0 ppid=2600 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.324000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 21:23:52.330000 audit[2740]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2740 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.330000 audit[2740]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff0da6fc0 a2=0 a3=ffffacc926c0 items=0 ppid=2600 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.330000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 21:23:52.332000 audit[2741]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_chain pid=2741 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.332000 audit[2741]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc8fd2bc0 a2=0 a3=ffffa6dab6c0 items=0 ppid=2600 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.332000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 21:23:52.336000 audit[2743]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_rule pid=2743 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.336000 audit[2743]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffeefe1de0 a2=0 a3=ffffa3b836c0 items=0 ppid=2600 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.336000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 21:23:52.338000 audit[2744]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2744 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.338000 audit[2744]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc06bd1b0 a2=0 a3=ffff893156c0 items=0 ppid=2600 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.338000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 21:23:52.341000 audit[2746]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2746 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.341000 audit[2746]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffff7e48d0 a2=0 a3=ffffa91976c0 items=0 ppid=2600 pid=2746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.341000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 21:23:52.347000 audit[2749]: NETFILTER_CFG table=filter:75 family=10 entries=2 op=nft_register_chain pid=2749 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.347000 audit[2749]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff7c94db0 a2=0 a3=ffffa42166c0 items=0 ppid=2600 pid=2749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.347000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 21:23:52.349000 audit[2750]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_chain pid=2750 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.349000 audit[2750]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdeccb5d0 a2=0 a3=ffffaa3966c0 items=0 ppid=2600 pid=2750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.349000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 21:23:52.352000 audit[2752]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2752 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.352000 audit[2752]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffff586930 a2=0 a3=ffffb66136c0 items=0 ppid=2600 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.352000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 21:23:52.354000 audit[2753]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_chain pid=2753 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.354000 audit[2753]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffefa88420 a2=0 a3=ffff85ab46c0 items=0 ppid=2600 pid=2753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.354000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 21:23:52.358000 audit[2755]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=2755 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.358000 audit[2755]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc47866d0 a2=0 a3=ffff82afc6c0 items=0 ppid=2600 pid=2755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.358000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 21:23:52.363000 audit[2758]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2758 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.363000 audit[2758]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdc77ee00 a2=0 a3=ffff8371e6c0 items=0 ppid=2600 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.363000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 21:23:52.369000 audit[2761]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2761 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.369000 audit[2761]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd13394b0 a2=0 a3=ffffa579f6c0 items=0 ppid=2600 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.369000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 21:23:52.370000 audit[2762]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2762 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.370000 audit[2762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffde44330 a2=0 a3=ffff99d236c0 items=0 ppid=2600 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.370000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 21:23:52.374000 audit[2764]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2764 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.374000 audit[2764]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffe5392a60 a2=0 a3=ffff9cb2e6c0 items=0 ppid=2600 pid=2764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.374000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:23:52.380000 audit[2767]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2767 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.380000 audit[2767]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffc5958770 a2=0 a3=ffffbdb886c0 items=0 ppid=2600 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.380000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:23:52.382000 audit[2768]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_chain pid=2768 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.382000 audit[2768]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdfc66060 a2=0 a3=ffffb181c6c0 items=0 ppid=2600 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.382000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 21:23:52.385000 audit[2770]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2770 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.385000 audit[2770]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffebafaab0 a2=0 a3=ffffb7a456c0 items=0 ppid=2600 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.385000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 21:23:52.391000 audit[2773]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_rule pid=2773 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.391000 audit[2773]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff5309810 a2=0 a3=ffff9c08e6c0 items=0 ppid=2600 pid=2773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.391000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 21:23:52.393000 audit[2774]: NETFILTER_CFG table=nat:88 family=10 entries=1 op=nft_register_chain pid=2774 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.393000 audit[2774]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc5c37180 a2=0 a3=ffff9c9cc6c0 items=0 ppid=2600 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.393000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 21:23:52.398000 audit[2776]: NETFILTER_CFG table=nat:89 family=10 entries=2 op=nft_register_chain pid=2776 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:23:52.398000 audit[2776]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffff2f4afb0 a2=0 a3=ffffae7da6c0 items=0 ppid=2600 pid=2776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.398000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 21:23:52.416000 audit[2778]: NETFILTER_CFG table=filter:90 family=10 entries=3 op=nft_register_rule pid=2778 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 21:23:52.416000 audit[2778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=fffff392ae20 a2=0 a3=ffffbde596c0 items=0 ppid=2600 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.416000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:23:52.416000 audit[2778]: NETFILTER_CFG table=nat:91 family=10 entries=7 op=nft_register_chain pid=2778 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 21:23:52.416000 audit[2778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=fffff392ae20 a2=0 a3=ffffbde596c0 items=0 ppid=2600 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:52.416000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:23:52.509448 kubelet[2475]: E1002 21:23:52.509349 2475 secret.go:194] Couldn't get secret kube-system/cilium-clustermesh: failed to sync secret cache: timed out waiting for the condition Oct 2 21:23:52.509926 kubelet[2475]: E1002 21:23:52.509632 2475 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-clustermesh-secrets podName:4daf26a8-9c4d-49c0-8fa8-cfc59855696c nodeName:}" failed. No retries permitted until 2023-10-02 21:23:53.009607993 +0000 UTC m=+15.535384528 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "clustermesh-secrets" (UniqueName: "kubernetes.io/secret/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-clustermesh-secrets") pod "cilium-6djhc" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c") : failed to sync secret cache: timed out waiting for the condition Oct 2 21:23:52.509926 kubelet[2475]: E1002 21:23:52.509351 2475 projected.go:267] Couldn't get secret kube-system/hubble-server-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 21:23:52.509926 kubelet[2475]: E1002 21:23:52.509835 2475 projected.go:198] Error preparing data for projected volume hubble-tls for pod kube-system/cilium-6djhc: failed to sync secret cache: timed out waiting for the condition Oct 2 21:23:52.509926 kubelet[2475]: E1002 21:23:52.509904 2475 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-hubble-tls podName:4daf26a8-9c4d-49c0-8fa8-cfc59855696c nodeName:}" failed. No retries permitted until 2023-10-02 21:23:53.009894859 +0000 UTC m=+15.535671394 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "hubble-tls" (UniqueName: "kubernetes.io/projected/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-hubble-tls") pod "cilium-6djhc" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c") : failed to sync secret cache: timed out waiting for the condition Oct 2 21:23:52.530147 systemd[1]: run-containerd-runc-k8s.io-43c4d50d4ae7a72af76405efa5c4d4b2778facc91c66181fe3d242b2e3fad182-runc.wNqsRU.mount: Deactivated successfully. Oct 2 21:23:53.044310 env[1353]: time="2023-10-02T21:23:53.043976461Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-6djhc,Uid:4daf26a8-9c4d-49c0-8fa8-cfc59855696c,Namespace:kube-system,Attempt:0,}" Oct 2 21:23:53.078814 env[1353]: time="2023-10-02T21:23:53.078739010Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:23:53.078814 env[1353]: time="2023-10-02T21:23:53.078783128Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:23:53.079017 env[1353]: time="2023-10-02T21:23:53.078793968Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:23:53.079260 env[1353]: time="2023-10-02T21:23:53.079163711Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465 pid=2787 runtime=io.containerd.runc.v2 Oct 2 21:23:53.097549 systemd[1]: Started cri-containerd-dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465.scope. Oct 2 21:23:53.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.127000 audit: BPF prog-id=121 op=LOAD Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { bpf } for pid=2798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2787 pid=2798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:53.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463333738393037663238336566306138613864626437643739663530 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2787 pid=2798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:53.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463333738393037663238336566306138613864626437643739663530 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { bpf } for pid=2798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { bpf } for pid=2798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { bpf } for pid=2798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { bpf } for pid=2798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { bpf } for pid=2798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit: BPF prog-id=122 op=LOAD Oct 2 21:23:53.128000 audit[2798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2787 pid=2798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:53.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463333738393037663238336566306138613864626437643739663530 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { bpf } for pid=2798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { bpf } for pid=2798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { bpf } for pid=2798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { bpf } for pid=2798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit: BPF prog-id=123 op=LOAD Oct 2 21:23:53.128000 audit[2798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2787 pid=2798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:53.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463333738393037663238336566306138613864626437643739663530 Oct 2 21:23:53.128000 audit: BPF prog-id=123 op=UNLOAD Oct 2 21:23:53.128000 audit: BPF prog-id=122 op=UNLOAD Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { bpf } for pid=2798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { bpf } for pid=2798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { bpf } for pid=2798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { perfmon } for pid=2798 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { bpf } for pid=2798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit[2798]: AVC avc: denied { bpf } for pid=2798 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:53.128000 audit: BPF prog-id=124 op=LOAD Oct 2 21:23:53.128000 audit[2798]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2787 pid=2798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:53.128000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463333738393037663238336566306138613864626437643739663530 Oct 2 21:23:53.148258 env[1353]: time="2023-10-02T21:23:53.148183352Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-6djhc,Uid:4daf26a8-9c4d-49c0-8fa8-cfc59855696c,Namespace:kube-system,Attempt:0,} returns sandbox id \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\"" Oct 2 21:23:54.008390 env[1353]: time="2023-10-02T21:23:54.008334012Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:54.014066 env[1353]: time="2023-10-02T21:23:54.014027160Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:54.018038 env[1353]: time="2023-10-02T21:23:54.018001104Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:23:54.018806 env[1353]: time="2023-10-02T21:23:54.018777509Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 21:23:54.021873 env[1353]: time="2023-10-02T21:23:54.021803575Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 21:23:54.022707 env[1353]: time="2023-10-02T21:23:54.022665497Z" level=info msg="CreateContainer within sandbox \"ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 21:23:54.054222 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount650465432.mount: Deactivated successfully. Oct 2 21:23:54.063421 env[1353]: time="2023-10-02T21:23:54.063370295Z" level=info msg="CreateContainer within sandbox \"ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2\"" Oct 2 21:23:54.065355 env[1353]: time="2023-10-02T21:23:54.065325409Z" level=info msg="StartContainer for \"fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2\"" Oct 2 21:23:54.088429 systemd[1]: Started cri-containerd-fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2.scope. Oct 2 21:23:54.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.120000 audit: BPF prog-id=125 op=LOAD Oct 2 21:23:54.120000 audit[2831]: AVC avc: denied { bpf } for pid=2831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.120000 audit[2831]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2654 pid=2831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:54.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664343136373432373834663136306264383065663930346130326331 Oct 2 21:23:54.120000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.120000 audit[2831]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2654 pid=2831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:54.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664343136373432373834663136306264383065663930346130326331 Oct 2 21:23:54.120000 audit[2831]: AVC avc: denied { bpf } for pid=2831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.120000 audit[2831]: AVC avc: denied { bpf } for pid=2831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.120000 audit[2831]: AVC avc: denied { bpf } for pid=2831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.120000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.120000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.120000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.120000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.120000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.120000 audit[2831]: AVC avc: denied { bpf } for pid=2831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.120000 audit[2831]: AVC avc: denied { bpf } for pid=2831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.120000 audit: BPF prog-id=126 op=LOAD Oct 2 21:23:54.120000 audit[2831]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2654 pid=2831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:54.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664343136373432373834663136306264383065663930346130326331 Oct 2 21:23:54.121000 audit[2831]: AVC avc: denied { bpf } for pid=2831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.121000 audit[2831]: AVC avc: denied { bpf } for pid=2831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.121000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.121000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.121000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.121000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.121000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.121000 audit[2831]: AVC avc: denied { bpf } for pid=2831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.121000 audit[2831]: AVC avc: denied { bpf } for pid=2831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.121000 audit: BPF prog-id=127 op=LOAD Oct 2 21:23:54.121000 audit[2831]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2654 pid=2831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:54.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664343136373432373834663136306264383065663930346130326331 Oct 2 21:23:54.122000 audit: BPF prog-id=127 op=UNLOAD Oct 2 21:23:54.122000 audit: BPF prog-id=126 op=UNLOAD Oct 2 21:23:54.122000 audit[2831]: AVC avc: denied { bpf } for pid=2831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.122000 audit[2831]: AVC avc: denied { bpf } for pid=2831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.122000 audit[2831]: AVC avc: denied { bpf } for pid=2831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.122000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.122000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.122000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.122000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.122000 audit[2831]: AVC avc: denied { perfmon } for pid=2831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.122000 audit[2831]: AVC avc: denied { bpf } for pid=2831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.122000 audit[2831]: AVC avc: denied { bpf } for pid=2831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:23:54.122000 audit: BPF prog-id=128 op=LOAD Oct 2 21:23:54.122000 audit[2831]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2654 pid=2831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:23:54.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664343136373432373834663136306264383065663930346130326331 Oct 2 21:23:54.148103 env[1353]: time="2023-10-02T21:23:54.148056026Z" level=info msg="StartContainer for \"fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2\" returns successfully" Oct 2 21:23:54.186000 audit[2842]: AVC avc: denied { map_create } for pid=2842 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c974 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c974 tclass=bpf permissive=0 Oct 2 21:23:54.186000 audit[2842]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=4000243768 a2=48 a3=0 items=0 ppid=2654 pid=2842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c974 key=(null) Oct 2 21:23:54.186000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 21:23:57.716306 kubelet[2475]: I1002 21:23:57.716276 2475 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-fn25d" podStartSLOduration=4.697827652 podCreationTimestamp="2023-10-02 21:23:51 +0000 UTC" firstStartedPulling="2023-10-02 21:23:52.001654866 +0000 UTC m=+14.527431401" lastFinishedPulling="2023-10-02 21:23:54.020066452 +0000 UTC m=+16.545842987" observedRunningTime="2023-10-02 21:23:54.828508624 +0000 UTC m=+17.354285119" watchObservedRunningTime="2023-10-02 21:23:57.716239238 +0000 UTC m=+20.242015773" Oct 2 21:23:59.014894 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1023878033.mount: Deactivated successfully. Oct 2 21:24:01.334018 env[1353]: time="2023-10-02T21:24:01.333972180Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:24:01.342592 env[1353]: time="2023-10-02T21:24:01.342556768Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:24:01.346692 env[1353]: time="2023-10-02T21:24:01.346628771Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:24:01.347310 env[1353]: time="2023-10-02T21:24:01.347281426Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 21:24:01.350199 env[1353]: time="2023-10-02T21:24:01.350134956Z" level=info msg="CreateContainer within sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 21:24:01.372341 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2906300094.mount: Deactivated successfully. Oct 2 21:24:01.376592 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1011744411.mount: Deactivated successfully. Oct 2 21:24:01.387757 env[1353]: time="2023-10-02T21:24:01.387718465Z" level=info msg="CreateContainer within sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8\"" Oct 2 21:24:01.389962 env[1353]: time="2023-10-02T21:24:01.388522634Z" level=info msg="StartContainer for \"8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8\"" Oct 2 21:24:01.424097 systemd[1]: Started cri-containerd-8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8.scope. Oct 2 21:24:01.438943 systemd[1]: cri-containerd-8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8.scope: Deactivated successfully. Oct 2 21:24:02.370493 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8-rootfs.mount: Deactivated successfully. Oct 2 21:24:03.050104 env[1353]: time="2023-10-02T21:24:03.050056961Z" level=info msg="shim disconnected" id=8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8 Oct 2 21:24:03.050524 env[1353]: time="2023-10-02T21:24:03.050504425Z" level=warning msg="cleaning up after shim disconnected" id=8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8 namespace=k8s.io Oct 2 21:24:03.050605 env[1353]: time="2023-10-02T21:24:03.050592661Z" level=info msg="cleaning up dead shim" Oct 2 21:24:03.062913 env[1353]: time="2023-10-02T21:24:03.062858125Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:24:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2886 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:24:03Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:24:03.063395 env[1353]: time="2023-10-02T21:24:03.063300069Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 21:24:03.065306 env[1353]: time="2023-10-02T21:24:03.063635216Z" level=error msg="Failed to pipe stdout of container \"8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8\"" error="reading from a closed fifo" Oct 2 21:24:03.065448 env[1353]: time="2023-10-02T21:24:03.065416550Z" level=error msg="Failed to pipe stderr of container \"8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8\"" error="reading from a closed fifo" Oct 2 21:24:03.069380 env[1353]: time="2023-10-02T21:24:03.069324885Z" level=error msg="StartContainer for \"8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:24:03.069748 kubelet[2475]: E1002 21:24:03.069718 2475 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8" Oct 2 21:24:03.070021 kubelet[2475]: E1002 21:24:03.069829 2475 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:24:03.070021 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:24:03.070021 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 21:24:03.070090 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tqbkj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:24:03.070090 kubelet[2475]: E1002 21:24:03.069866 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:24:03.828456 env[1353]: time="2023-10-02T21:24:03.828409009Z" level=info msg="CreateContainer within sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 21:24:03.861958 env[1353]: time="2023-10-02T21:24:03.861894604Z" level=info msg="CreateContainer within sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847\"" Oct 2 21:24:03.865915 env[1353]: time="2023-10-02T21:24:03.864254716Z" level=info msg="StartContainer for \"55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847\"" Oct 2 21:24:03.892968 systemd[1]: run-containerd-runc-k8s.io-55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847-runc.2GHedy.mount: Deactivated successfully. Oct 2 21:24:03.897492 systemd[1]: Started cri-containerd-55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847.scope. Oct 2 21:24:03.913110 systemd[1]: cri-containerd-55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847.scope: Deactivated successfully. Oct 2 21:24:03.929467 env[1353]: time="2023-10-02T21:24:03.929409933Z" level=info msg="shim disconnected" id=55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847 Oct 2 21:24:03.929890 env[1353]: time="2023-10-02T21:24:03.929869476Z" level=warning msg="cleaning up after shim disconnected" id=55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847 namespace=k8s.io Oct 2 21:24:03.929988 env[1353]: time="2023-10-02T21:24:03.929974672Z" level=info msg="cleaning up dead shim" Oct 2 21:24:03.946627 env[1353]: time="2023-10-02T21:24:03.946576654Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:24:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2925 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:24:03Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:24:03.947085 env[1353]: time="2023-10-02T21:24:03.947024917Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 21:24:03.949341 env[1353]: time="2023-10-02T21:24:03.949290833Z" level=error msg="Failed to pipe stdout of container \"55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847\"" error="reading from a closed fifo" Oct 2 21:24:03.949494 env[1353]: time="2023-10-02T21:24:03.949466307Z" level=error msg="Failed to pipe stderr of container \"55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847\"" error="reading from a closed fifo" Oct 2 21:24:03.953007 env[1353]: time="2023-10-02T21:24:03.952949537Z" level=error msg="StartContainer for \"55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:24:03.954952 kubelet[2475]: E1002 21:24:03.953288 2475 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847" Oct 2 21:24:03.954952 kubelet[2475]: E1002 21:24:03.953401 2475 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:24:03.954952 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:24:03.954952 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 21:24:03.954952 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tqbkj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:24:03.954952 kubelet[2475]: E1002 21:24:03.953446 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:24:04.828506 kubelet[2475]: I1002 21:24:04.828474 2475 scope.go:115] "RemoveContainer" containerID="8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8" Oct 2 21:24:04.828887 kubelet[2475]: I1002 21:24:04.828858 2475 scope.go:115] "RemoveContainer" containerID="8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8" Oct 2 21:24:04.835267 env[1353]: time="2023-10-02T21:24:04.833086353Z" level=info msg="RemoveContainer for \"8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8\"" Oct 2 21:24:04.837164 env[1353]: time="2023-10-02T21:24:04.835673499Z" level=info msg="RemoveContainer for \"8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8\"" Oct 2 21:24:04.837164 env[1353]: time="2023-10-02T21:24:04.835747096Z" level=error msg="RemoveContainer for \"8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8\" failed" error="failed to set removing state for container \"8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8\": container is already in removing state" Oct 2 21:24:04.837282 kubelet[2475]: E1002 21:24:04.835931 2475 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8\": container is already in removing state" containerID="8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8" Oct 2 21:24:04.837282 kubelet[2475]: E1002 21:24:04.835969 2475 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8": container is already in removing state; Skipping pod "cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)" Oct 2 21:24:04.837282 kubelet[2475]: E1002 21:24:04.836306 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:24:04.843397 env[1353]: time="2023-10-02T21:24:04.843357578Z" level=info msg="RemoveContainer for \"8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8\" returns successfully" Oct 2 21:24:04.845789 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847-rootfs.mount: Deactivated successfully. Oct 2 21:24:05.831399 kubelet[2475]: E1002 21:24:05.831375 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:24:06.154450 kubelet[2475]: W1002 21:24:06.154414 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4daf26a8_9c4d_49c0_8fa8_cfc59855696c.slice/cri-containerd-8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8.scope WatchSource:0}: container "8150c4c8f4db136e17281fdc1fd34f43c08fab02dedd4344a0aa1881bf43c4c8" in namespace "k8s.io": not found Oct 2 21:24:09.260453 kubelet[2475]: W1002 21:24:09.260340 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4daf26a8_9c4d_49c0_8fa8_cfc59855696c.slice/cri-containerd-55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847.scope WatchSource:0}: task 55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847 not found: not found Oct 2 21:24:18.707077 env[1353]: time="2023-10-02T21:24:18.707026539Z" level=info msg="CreateContainer within sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 21:24:18.737018 env[1353]: time="2023-10-02T21:24:18.736963068Z" level=info msg="CreateContainer within sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91\"" Oct 2 21:24:18.737610 env[1353]: time="2023-10-02T21:24:18.737577891Z" level=info msg="StartContainer for \"f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91\"" Oct 2 21:24:18.760005 systemd[1]: Started cri-containerd-f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91.scope. Oct 2 21:24:18.775943 systemd[1]: cri-containerd-f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91.scope: Deactivated successfully. Oct 2 21:24:18.802375 env[1353]: time="2023-10-02T21:24:18.802308407Z" level=info msg="shim disconnected" id=f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91 Oct 2 21:24:18.802375 env[1353]: time="2023-10-02T21:24:18.802368485Z" level=warning msg="cleaning up after shim disconnected" id=f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91 namespace=k8s.io Oct 2 21:24:18.802375 env[1353]: time="2023-10-02T21:24:18.802379765Z" level=info msg="cleaning up dead shim" Oct 2 21:24:18.829654 env[1353]: time="2023-10-02T21:24:18.829603733Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:24:18Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2963 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:24:18Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:24:18.829932 env[1353]: time="2023-10-02T21:24:18.829876925Z" level=error msg="copy shim log" error="read /proc/self/fd/56: file already closed" Oct 2 21:24:18.831311 env[1353]: time="2023-10-02T21:24:18.831273404Z" level=error msg="Failed to pipe stderr of container \"f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91\"" error="reading from a closed fifo" Oct 2 21:24:18.831474 env[1353]: time="2023-10-02T21:24:18.831442040Z" level=error msg="Failed to pipe stdout of container \"f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91\"" error="reading from a closed fifo" Oct 2 21:24:18.834743 env[1353]: time="2023-10-02T21:24:18.834697385Z" level=error msg="StartContainer for \"f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:24:18.835248 kubelet[2475]: E1002 21:24:18.835074 2475 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91" Oct 2 21:24:18.835248 kubelet[2475]: E1002 21:24:18.835213 2475 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:24:18.835248 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:24:18.835248 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 21:24:18.835248 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tqbkj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:24:18.836077 kubelet[2475]: E1002 21:24:18.835861 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:24:18.855272 kubelet[2475]: I1002 21:24:18.855120 2475 scope.go:115] "RemoveContainer" containerID="55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847" Oct 2 21:24:18.856951 kubelet[2475]: I1002 21:24:18.856869 2475 scope.go:115] "RemoveContainer" containerID="55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847" Oct 2 21:24:18.857771 env[1353]: time="2023-10-02T21:24:18.856832501Z" level=info msg="RemoveContainer for \"55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847\"" Oct 2 21:24:18.864825 env[1353]: time="2023-10-02T21:24:18.864778310Z" level=info msg="RemoveContainer for \"55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847\"" Oct 2 21:24:18.865089 env[1353]: time="2023-10-02T21:24:18.865042982Z" level=error msg="RemoveContainer for \"55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847\" failed" error="failed to set removing state for container \"55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847\": container is already in removing state" Oct 2 21:24:18.866488 kubelet[2475]: E1002 21:24:18.866468 2475 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847\": container is already in removing state" containerID="55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847" Oct 2 21:24:18.866660 kubelet[2475]: E1002 21:24:18.866645 2475 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847": container is already in removing state; Skipping pod "cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)" Oct 2 21:24:18.867142 kubelet[2475]: E1002 21:24:18.867126 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:24:18.877356 env[1353]: time="2023-10-02T21:24:18.877306905Z" level=info msg="RemoveContainer for \"55276aaf9043914444177ea9e86ae46f0d5cf6facc408a6f0330d0562bc35847\" returns successfully" Oct 2 21:24:19.724599 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91-rootfs.mount: Deactivated successfully. Oct 2 21:24:21.912771 kubelet[2475]: W1002 21:24:21.912736 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4daf26a8_9c4d_49c0_8fa8_cfc59855696c.slice/cri-containerd-f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91.scope WatchSource:0}: task f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91 not found: not found Oct 2 21:24:31.705190 kubelet[2475]: E1002 21:24:31.705154 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:24:32.763000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:32.769781 kernel: kauditd_printk_skb: 429 callbacks suppressed Oct 2 21:24:32.769889 kernel: audit: type=1400 audit(1696281872.763:1094): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:32.763000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001b19830 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:24:32.840993 kernel: audit: type=1300 audit(1696281872.763:1094): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001b19830 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:24:32.763000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:32.867434 kernel: audit: type=1327 audit(1696281872.763:1094): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:32.867538 kernel: audit: type=1400 audit(1696281872.764:1095): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:32.764000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:32.764000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400185b520 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:24:32.936934 kernel: audit: type=1300 audit(1696281872.764:1095): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400185b520 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:24:32.764000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:32.965355 kernel: audit: type=1327 audit(1696281872.764:1095): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:33.124000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:33.124000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400870ddd0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:24:33.178152 kernel: audit: type=1400 audit(1696281873.124:1096): avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:33.178481 kernel: audit: type=1300 audit(1696281873.124:1096): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400870ddd0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:24:33.124000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:24:33.211946 kernel: audit: type=1327 audit(1696281873.124:1096): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:24:33.124000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:33.240006 kernel: audit: type=1400 audit(1696281873.124:1097): avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:33.124000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400b46de00 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:24:33.124000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:24:33.152000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:33.152000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4008a28b70 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:24:33.152000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:24:33.157000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:33.157000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400b46de40 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:24:33.157000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:24:33.158000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:33.158000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400870df80 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:24:33.158000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:24:33.167000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:33.167000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4008a28c90 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:24:33.167000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:24:45.709260 env[1353]: time="2023-10-02T21:24:45.708154344Z" level=info msg="CreateContainer within sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 21:24:45.731730 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3703470817.mount: Deactivated successfully. Oct 2 21:24:45.746642 env[1353]: time="2023-10-02T21:24:45.746564680Z" level=info msg="CreateContainer within sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab\"" Oct 2 21:24:45.748504 env[1353]: time="2023-10-02T21:24:45.747708416Z" level=info msg="StartContainer for \"1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab\"" Oct 2 21:24:45.774136 systemd[1]: Started cri-containerd-1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab.scope. Oct 2 21:24:45.791747 systemd[1]: cri-containerd-1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab.scope: Deactivated successfully. Oct 2 21:24:45.849048 env[1353]: time="2023-10-02T21:24:45.848979443Z" level=info msg="shim disconnected" id=1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab Oct 2 21:24:45.849048 env[1353]: time="2023-10-02T21:24:45.849044162Z" level=warning msg="cleaning up after shim disconnected" id=1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab namespace=k8s.io Oct 2 21:24:45.849048 env[1353]: time="2023-10-02T21:24:45.849054202Z" level=info msg="cleaning up dead shim" Oct 2 21:24:45.862601 env[1353]: time="2023-10-02T21:24:45.862499913Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:24:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3005 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:24:45Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:24:45.862850 env[1353]: time="2023-10-02T21:24:45.862792147Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 21:24:45.863206 env[1353]: time="2023-10-02T21:24:45.863169699Z" level=error msg="Failed to pipe stderr of container \"1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab\"" error="reading from a closed fifo" Oct 2 21:24:45.865254 env[1353]: time="2023-10-02T21:24:45.865200575Z" level=error msg="Failed to pipe stdout of container \"1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab\"" error="reading from a closed fifo" Oct 2 21:24:45.869499 env[1353]: time="2023-10-02T21:24:45.869403325Z" level=error msg="StartContainer for \"1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:24:45.869841 kubelet[2475]: E1002 21:24:45.869812 2475 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab" Oct 2 21:24:45.870116 kubelet[2475]: E1002 21:24:45.869943 2475 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:24:45.870116 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:24:45.870116 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 21:24:45.870116 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tqbkj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:24:45.870116 kubelet[2475]: E1002 21:24:45.869980 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:24:45.904285 kubelet[2475]: I1002 21:24:45.902520 2475 scope.go:115] "RemoveContainer" containerID="f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91" Oct 2 21:24:45.904285 kubelet[2475]: I1002 21:24:45.902888 2475 scope.go:115] "RemoveContainer" containerID="f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91" Oct 2 21:24:45.908028 env[1353]: time="2023-10-02T21:24:45.907987938Z" level=info msg="RemoveContainer for \"f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91\"" Oct 2 21:24:45.911958 env[1353]: time="2023-10-02T21:24:45.911853295Z" level=info msg="RemoveContainer for \"f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91\"" Oct 2 21:24:45.912148 env[1353]: time="2023-10-02T21:24:45.912039051Z" level=error msg="RemoveContainer for \"f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91\" failed" error="failed to set removing state for container \"f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91\": container is already in removing state" Oct 2 21:24:45.915007 kubelet[2475]: E1002 21:24:45.914390 2475 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91\": container is already in removing state" containerID="f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91" Oct 2 21:24:45.915007 kubelet[2475]: E1002 21:24:45.914439 2475 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91": container is already in removing state; Skipping pod "cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)" Oct 2 21:24:45.915007 kubelet[2475]: E1002 21:24:45.914733 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:24:45.917534 env[1353]: time="2023-10-02T21:24:45.917427135Z" level=info msg="RemoveContainer for \"f6bd675d7ec2c368fed1af044763da3d7faff90f6aca9cf237cebdc02df33b91\" returns successfully" Oct 2 21:24:46.728981 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab-rootfs.mount: Deactivated successfully. Oct 2 21:24:48.953699 kubelet[2475]: W1002 21:24:48.953653 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4daf26a8_9c4d_49c0_8fa8_cfc59855696c.slice/cri-containerd-1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab.scope WatchSource:0}: task 1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab not found: not found Oct 2 21:24:50.408000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:50.416949 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 21:24:50.417154 kernel: audit: type=1400 audit(1696281890.408:1102): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:50.409000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:50.469755 kernel: audit: type=1400 audit(1696281890.409:1103): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:50.409000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40004224c0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:24:50.499588 kernel: audit: type=1300 audit(1696281890.409:1103): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40004224c0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:24:50.409000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:50.537624 kernel: audit: type=1327 audit(1696281890.409:1103): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:50.409000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:50.559651 kernel: audit: type=1400 audit(1696281890.409:1104): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:50.409000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000422540 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:24:50.591476 kernel: audit: type=1300 audit(1696281890.409:1104): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000422540 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:24:50.409000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:50.632474 kernel: audit: type=1327 audit(1696281890.409:1104): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:50.410000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:50.655700 kernel: audit: type=1400 audit(1696281890.410:1105): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:24:50.410000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000422f80 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:24:50.686270 kernel: audit: type=1300 audit(1696281890.410:1105): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000422f80 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:24:50.686415 kernel: audit: type=1327 audit(1696281890.410:1105): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:50.410000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:50.408000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001a98a80 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:24:50.408000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:24:57.706467 kubelet[2475]: E1002 21:24:57.706219 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:25:12.704689 kubelet[2475]: E1002 21:25:12.704651 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:25:24.704887 kubelet[2475]: E1002 21:25:24.704847 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:25:32.763000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:32.769606 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:25:32.769708 kernel: audit: type=1400 audit(1696281932.763:1106): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:32.763000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40007fb1d0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:25:32.837741 kernel: audit: type=1300 audit(1696281932.763:1106): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40007fb1d0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:25:32.763000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:32.863201 kernel: audit: type=1327 audit(1696281932.763:1106): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:32.863413 kernel: audit: type=1400 audit(1696281932.765:1107): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:32.765000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:32.765000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ba46e0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:25:32.927488 kernel: audit: type=1300 audit(1696281932.765:1107): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ba46e0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:25:32.765000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:32.951634 kernel: audit: type=1327 audit(1696281932.765:1107): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:33.124000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:33.124000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40043f32c0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:25:33.177116 kernel: audit: type=1400 audit(1696281933.124:1108): avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:33.177280 kernel: audit: type=1300 audit(1696281933.124:1108): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40043f32c0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:25:33.124000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:25:33.202921 kernel: audit: type=1327 audit(1696281933.124:1108): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:25:33.124000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:33.238654 kernel: audit: type=1400 audit(1696281933.124:1109): avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:33.124000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4006b219a0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:25:33.124000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:25:33.152000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:33.152000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400a3e7c80 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:25:33.152000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:25:33.158000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:33.158000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40043f3530 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:25:33.158000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:25:33.158000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:33.158000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4006b219e0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:25:33.158000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:25:33.166000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:33.166000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400a3e7da0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:25:33.166000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:25:37.709522 env[1353]: time="2023-10-02T21:25:37.709150237Z" level=info msg="CreateContainer within sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 21:25:37.718771 kubelet[2475]: E1002 21:25:37.718704 2475 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 21:25:37.731379 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount476197055.mount: Deactivated successfully. Oct 2 21:25:37.742091 env[1353]: time="2023-10-02T21:25:37.742044977Z" level=info msg="CreateContainer within sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed\"" Oct 2 21:25:37.743081 env[1353]: time="2023-10-02T21:25:37.743053231Z" level=info msg="StartContainer for \"b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed\"" Oct 2 21:25:37.767143 systemd[1]: Started cri-containerd-b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed.scope. Oct 2 21:25:37.782814 systemd[1]: cri-containerd-b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed.scope: Deactivated successfully. Oct 2 21:25:37.804510 env[1353]: time="2023-10-02T21:25:37.804458673Z" level=info msg="shim disconnected" id=b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed Oct 2 21:25:37.805028 env[1353]: time="2023-10-02T21:25:37.805003263Z" level=warning msg="cleaning up after shim disconnected" id=b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed namespace=k8s.io Oct 2 21:25:37.805136 env[1353]: time="2023-10-02T21:25:37.805120389Z" level=info msg="cleaning up dead shim" Oct 2 21:25:37.834166 env[1353]: time="2023-10-02T21:25:37.834121278Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:25:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3049 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:25:37Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:25:37.834664 env[1353]: time="2023-10-02T21:25:37.834610225Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 21:25:37.835287 env[1353]: time="2023-10-02T21:25:37.835201737Z" level=error msg="Failed to pipe stdout of container \"b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed\"" error="reading from a closed fifo" Oct 2 21:25:37.835352 env[1353]: time="2023-10-02T21:25:37.835270140Z" level=error msg="Failed to pipe stderr of container \"b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed\"" error="reading from a closed fifo" Oct 2 21:25:37.839442 env[1353]: time="2023-10-02T21:25:37.839378003Z" level=error msg="StartContainer for \"b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:25:37.840104 kubelet[2475]: E1002 21:25:37.839772 2475 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed" Oct 2 21:25:37.840104 kubelet[2475]: E1002 21:25:37.839872 2475 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:25:37.840104 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:25:37.840104 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 21:25:37.840104 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tqbkj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:25:37.840104 kubelet[2475]: E1002 21:25:37.839931 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:25:37.853106 kubelet[2475]: E1002 21:25:37.853061 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:25:37.994822 kubelet[2475]: I1002 21:25:37.993095 2475 scope.go:115] "RemoveContainer" containerID="1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab" Oct 2 21:25:37.994822 kubelet[2475]: I1002 21:25:37.993454 2475 scope.go:115] "RemoveContainer" containerID="1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab" Oct 2 21:25:37.997698 env[1353]: time="2023-10-02T21:25:37.997662526Z" level=info msg="RemoveContainer for \"1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab\"" Oct 2 21:25:37.998337 env[1353]: time="2023-10-02T21:25:37.998309961Z" level=info msg="RemoveContainer for \"1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab\"" Oct 2 21:25:37.998575 env[1353]: time="2023-10-02T21:25:37.998541733Z" level=error msg="RemoveContainer for \"1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab\" failed" error="failed to set removing state for container \"1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab\": container is already in removing state" Oct 2 21:25:37.999329 kubelet[2475]: E1002 21:25:37.998896 2475 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab\": container is already in removing state" containerID="1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab" Oct 2 21:25:37.999329 kubelet[2475]: E1002 21:25:37.998931 2475 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab": container is already in removing state; Skipping pod "cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)" Oct 2 21:25:37.999561 kubelet[2475]: E1002 21:25:37.999310 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:25:38.005848 env[1353]: time="2023-10-02T21:25:38.005790761Z" level=info msg="RemoveContainer for \"1922bd7d0556e23a8cda65a2415a83ab84b49803b652bc43363ee3433e3faaab\" returns successfully" Oct 2 21:25:38.725372 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed-rootfs.mount: Deactivated successfully. Oct 2 21:25:40.910563 kubelet[2475]: W1002 21:25:40.910488 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4daf26a8_9c4d_49c0_8fa8_cfc59855696c.slice/cri-containerd-b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed.scope WatchSource:0}: task b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed not found: not found Oct 2 21:25:42.853899 kubelet[2475]: E1002 21:25:42.853872 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:25:47.855324 kubelet[2475]: E1002 21:25:47.855251 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:25:50.410000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:50.420934 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 21:25:50.421197 kernel: audit: type=1400 audit(1696281950.410:1114): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:50.410000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:50.467313 kernel: audit: type=1400 audit(1696281950.410:1115): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:50.467426 kernel: audit: type=1300 audit(1696281950.410:1114): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d78ac0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:25:50.410000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d78ac0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:25:50.410000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:50.535337 kernel: audit: type=1327 audit(1696281950.410:1114): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:50.410000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:50.557877 kernel: audit: type=1400 audit(1696281950.410:1116): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:50.558011 kernel: audit: type=1300 audit(1696281950.410:1116): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d78b00 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:25:50.410000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d78b00 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:25:50.410000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:50.624051 kernel: audit: type=1327 audit(1696281950.410:1116): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:50.624253 kernel: audit: type=1400 audit(1696281950.410:1117): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:50.410000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:25:50.410000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d79000 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:25:50.677046 kernel: audit: type=1300 audit(1696281950.410:1117): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d79000 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:25:50.410000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:50.702727 kernel: audit: type=1327 audit(1696281950.410:1117): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:50.410000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40016edaa0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:25:50.410000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:25:51.704327 kubelet[2475]: E1002 21:25:51.704291 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:25:52.856662 kubelet[2475]: E1002 21:25:52.856638 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:25:57.858149 kubelet[2475]: E1002 21:25:57.858104 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:02.859079 kubelet[2475]: E1002 21:26:02.859051 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:04.031402 systemd[1]: Started sshd@7-10.200.20.19:22-10.200.12.6:49014.service. Oct 2 21:26:04.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.19:22-10.200.12.6:49014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:04.037417 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:26:04.037511 kernel: audit: type=1130 audit(1696281964.030:1118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.19:22-10.200.12.6:49014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:04.471000 audit[3065]: USER_ACCT pid=3065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:04.473081 sshd[3065]: Accepted publickey for core from 10.200.12.6 port 49014 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:26:04.475164 sshd[3065]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:26:04.473000 audit[3065]: CRED_ACQ pid=3065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:04.527253 kernel: audit: type=1101 audit(1696281964.471:1119): pid=3065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:04.527522 kernel: audit: type=1103 audit(1696281964.473:1120): pid=3065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:04.527569 kernel: audit: type=1006 audit(1696281964.473:1121): pid=3065 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 21:26:04.541375 kernel: audit: type=1300 audit(1696281964.473:1121): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2955bd0 a2=3 a3=1 items=0 ppid=1 pid=3065 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:04.473000 audit[3065]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2955bd0 a2=3 a3=1 items=0 ppid=1 pid=3065 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:04.544611 systemd[1]: Started session-10.scope. Oct 2 21:26:04.546003 systemd-logind[1338]: New session 10 of user core. Oct 2 21:26:04.473000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:04.573293 kernel: audit: type=1327 audit(1696281964.473:1121): proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:04.573372 kernel: audit: type=1105 audit(1696281964.549:1122): pid=3065 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:04.549000 audit[3065]: USER_START pid=3065 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:04.552000 audit[3067]: CRED_ACQ pid=3067 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:04.625342 kernel: audit: type=1103 audit(1696281964.552:1123): pid=3067 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:04.929469 sshd[3065]: pam_unix(sshd:session): session closed for user core Oct 2 21:26:04.929000 audit[3065]: USER_END pid=3065 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:04.932655 systemd-logind[1338]: Session 10 logged out. Waiting for processes to exit. Oct 2 21:26:04.934135 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 21:26:04.935140 systemd[1]: sshd@7-10.200.20.19:22-10.200.12.6:49014.service: Deactivated successfully. Oct 2 21:26:04.936527 systemd-logind[1338]: Removed session 10. Oct 2 21:26:04.929000 audit[3065]: CRED_DISP pid=3065 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:04.981728 kernel: audit: type=1106 audit(1696281964.929:1124): pid=3065 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:04.981838 kernel: audit: type=1104 audit(1696281964.929:1125): pid=3065 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:04.934000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.19:22-10.200.12.6:49014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:05.704447 kubelet[2475]: E1002 21:26:05.704412 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:26:07.860618 kubelet[2475]: E1002 21:26:07.860593 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:12.862589 kubelet[2475]: E1002 21:26:12.862563 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:14.997467 systemd[1]: Started sshd@8-10.200.20.19:22-10.200.12.6:34518.service. Oct 2 21:26:14.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.19:22-10.200.12.6:34518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:15.009289 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:26:15.009488 kernel: audit: type=1130 audit(1696281974.997:1127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.19:22-10.200.12.6:34518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:15.410000 audit[3078]: USER_ACCT pid=3078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:15.410869 sshd[3078]: Accepted publickey for core from 10.200.12.6 port 34518 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:26:15.416599 sshd[3078]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:26:15.425508 systemd[1]: Started session-11.scope. Oct 2 21:26:15.427024 systemd-logind[1338]: New session 11 of user core. Oct 2 21:26:15.415000 audit[3078]: CRED_ACQ pid=3078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:15.471709 kernel: audit: type=1101 audit(1696281975.410:1128): pid=3078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:15.471844 kernel: audit: type=1103 audit(1696281975.415:1129): pid=3078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:15.471877 kernel: audit: type=1006 audit(1696281975.416:1130): pid=3078 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 21:26:15.416000 audit[3078]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffccd649a0 a2=3 a3=1 items=0 ppid=1 pid=3078 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:15.528376 kernel: audit: type=1300 audit(1696281975.416:1130): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffccd649a0 a2=3 a3=1 items=0 ppid=1 pid=3078 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:15.416000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:15.536819 kernel: audit: type=1327 audit(1696281975.416:1130): proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:15.536901 kernel: audit: type=1105 audit(1696281975.432:1131): pid=3078 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:15.432000 audit[3078]: USER_START pid=3078 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:15.562315 kernel: audit: type=1103 audit(1696281975.437:1132): pid=3080 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:15.437000 audit[3080]: CRED_ACQ pid=3080 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:15.805476 sshd[3078]: pam_unix(sshd:session): session closed for user core Oct 2 21:26:15.806000 audit[3078]: USER_END pid=3078 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:15.816913 systemd-logind[1338]: Session 11 logged out. Waiting for processes to exit. Oct 2 21:26:15.818439 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 21:26:15.820091 systemd-logind[1338]: Removed session 11. Oct 2 21:26:15.821122 systemd[1]: sshd@8-10.200.20.19:22-10.200.12.6:34518.service: Deactivated successfully. Oct 2 21:26:15.807000 audit[3078]: CRED_DISP pid=3078 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:15.867584 kernel: audit: type=1106 audit(1696281975.806:1133): pid=3078 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:15.867666 kernel: audit: type=1104 audit(1696281975.807:1134): pid=3078 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:15.821000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.19:22-10.200.12.6:34518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:17.863852 kubelet[2475]: E1002 21:26:17.863825 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:20.704662 kubelet[2475]: E1002 21:26:20.704627 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:26:22.865321 kubelet[2475]: E1002 21:26:22.865291 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:25.874175 systemd[1]: Started sshd@9-10.200.20.19:22-10.200.12.6:34876.service. Oct 2 21:26:25.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.19:22-10.200.12.6:34876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:25.879482 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:26:25.879582 kernel: audit: type=1130 audit(1696281985.873:1136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.19:22-10.200.12.6:34876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:26.292000 audit[3092]: USER_ACCT pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:26.293954 sshd[3092]: Accepted publickey for core from 10.200.12.6 port 34876 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:26:26.332264 kernel: audit: type=1101 audit(1696281986.292:1137): pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:26.333808 sshd[3092]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:26:26.332000 audit[3092]: CRED_ACQ pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:26.339140 systemd[1]: Started session-12.scope. Oct 2 21:26:26.340518 systemd-logind[1338]: New session 12 of user core. Oct 2 21:26:26.372507 kernel: audit: type=1103 audit(1696281986.332:1138): pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:26.372698 kernel: audit: type=1006 audit(1696281986.332:1139): pid=3092 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 21:26:26.372728 kernel: audit: type=1300 audit(1696281986.332:1139): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9981240 a2=3 a3=1 items=0 ppid=1 pid=3092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:26.332000 audit[3092]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9981240 a2=3 a3=1 items=0 ppid=1 pid=3092 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:26.332000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:26.406977 kernel: audit: type=1327 audit(1696281986.332:1139): proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:26.407160 kernel: audit: type=1105 audit(1696281986.343:1140): pid=3092 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:26.343000 audit[3092]: USER_START pid=3092 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:26.347000 audit[3094]: CRED_ACQ pid=3094 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:26.464284 kernel: audit: type=1103 audit(1696281986.347:1141): pid=3094 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:26.706476 sshd[3092]: pam_unix(sshd:session): session closed for user core Oct 2 21:26:26.706000 audit[3092]: USER_END pid=3092 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:26.711918 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 21:26:26.712937 systemd[1]: sshd@9-10.200.20.19:22-10.200.12.6:34876.service: Deactivated successfully. Oct 2 21:26:26.708000 audit[3092]: CRED_DISP pid=3092 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:26.749145 systemd-logind[1338]: Session 12 logged out. Waiting for processes to exit. Oct 2 21:26:26.750071 systemd-logind[1338]: Removed session 12. Oct 2 21:26:26.771930 kernel: audit: type=1106 audit(1696281986.706:1142): pid=3092 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:26.772056 kernel: audit: type=1104 audit(1696281986.708:1143): pid=3092 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:26.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.19:22-10.200.12.6:34876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:27.866457 kubelet[2475]: E1002 21:26:27.866378 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:32.764000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:32.769602 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:26:32.769663 kernel: audit: type=1400 audit(1696281992.764:1145): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:32.764000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400205d9b0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:26:32.835987 kernel: audit: type=1300 audit(1696281992.764:1145): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400205d9b0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:26:32.764000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:32.860998 kernel: audit: type=1327 audit(1696281992.764:1145): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:32.765000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:32.867951 kubelet[2475]: E1002 21:26:32.867927 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:32.884478 kernel: audit: type=1400 audit(1696281992.765:1146): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:32.765000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025583c0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:26:32.926822 kernel: audit: type=1300 audit(1696281992.765:1146): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40025583c0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:26:32.926949 kernel: audit: type=1327 audit(1696281992.765:1146): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:32.765000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:33.125000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:33.125000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d649ee0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:26:33.180840 kernel: audit: type=1400 audit(1696281993.125:1147): avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:33.180970 kernel: audit: type=1300 audit(1696281993.125:1147): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d649ee0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:26:33.125000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:26:33.221093 kernel: audit: type=1327 audit(1696281993.125:1147): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:26:33.125000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:33.251425 kernel: audit: type=1400 audit(1696281993.125:1148): avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:33.125000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400ad85a40 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:26:33.125000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:26:33.179000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:33.179000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400b350ae0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:26:33.179000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:26:33.179000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:33.179000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400b350b40 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:26:33.179000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:26:33.179000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:33.179000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400ad85ad0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:26:33.179000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:26:33.180000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:33.180000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400d649f20 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:26:33.180000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:26:33.704977 kubelet[2475]: E1002 21:26:33.704921 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:26:36.774534 systemd[1]: Started sshd@10-10.200.20.19:22-10.200.12.6:51380.service. Oct 2 21:26:36.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.19:22-10.200.12.6:51380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:37.178000 audit[3104]: USER_ACCT pid=3104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:37.179876 sshd[3104]: Accepted publickey for core from 10.200.12.6 port 51380 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:26:37.180000 audit[3104]: CRED_ACQ pid=3104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:37.180000 audit[3104]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb672ca0 a2=3 a3=1 items=0 ppid=1 pid=3104 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:37.180000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:37.181825 sshd[3104]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:26:37.185787 systemd-logind[1338]: New session 13 of user core. Oct 2 21:26:37.186308 systemd[1]: Started session-13.scope. Oct 2 21:26:37.189000 audit[3104]: USER_START pid=3104 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:37.192000 audit[3106]: CRED_ACQ pid=3106 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:37.555200 sshd[3104]: pam_unix(sshd:session): session closed for user core Oct 2 21:26:37.555000 audit[3104]: USER_END pid=3104 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:37.555000 audit[3104]: CRED_DISP pid=3104 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:37.558750 systemd-logind[1338]: Session 13 logged out. Waiting for processes to exit. Oct 2 21:26:37.558858 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 21:26:37.559513 systemd[1]: sshd@10-10.200.20.19:22-10.200.12.6:51380.service: Deactivated successfully. Oct 2 21:26:37.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.19:22-10.200.12.6:51380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:37.560588 systemd-logind[1338]: Removed session 13. Oct 2 21:26:37.870376 kubelet[2475]: E1002 21:26:37.869859 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:42.871425 kubelet[2475]: E1002 21:26:42.871397 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:46.704133 kubelet[2475]: E1002 21:26:46.704086 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:26:47.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.19:22-10.200.12.6:50006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:47.626878 systemd[1]: Started sshd@11-10.200.20.19:22-10.200.12.6:50006.service. Oct 2 21:26:47.632884 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 21:26:47.633254 kernel: audit: type=1130 audit(1696282007.625:1162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.19:22-10.200.12.6:50006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:47.873034 kubelet[2475]: E1002 21:26:47.873009 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:48.032000 audit[3118]: USER_ACCT pid=3118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:48.034272 sshd[3118]: Accepted publickey for core from 10.200.12.6 port 50006 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:26:48.036363 sshd[3118]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:26:48.034000 audit[3118]: CRED_ACQ pid=3118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:48.078769 kernel: audit: type=1101 audit(1696282008.032:1163): pid=3118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:48.078928 kernel: audit: type=1103 audit(1696282008.034:1164): pid=3118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:48.081777 systemd[1]: Started session-14.scope. Oct 2 21:26:48.082590 systemd-logind[1338]: New session 14 of user core. Oct 2 21:26:48.092642 kernel: audit: type=1006 audit(1696282008.034:1165): pid=3118 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 21:26:48.034000 audit[3118]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe136e410 a2=3 a3=1 items=0 ppid=1 pid=3118 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:48.128265 kernel: audit: type=1300 audit(1696282008.034:1165): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe136e410 a2=3 a3=1 items=0 ppid=1 pid=3118 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:48.034000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:48.136789 kernel: audit: type=1327 audit(1696282008.034:1165): proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:48.086000 audit[3118]: USER_START pid=3118 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:48.163257 kernel: audit: type=1105 audit(1696282008.086:1166): pid=3118 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:48.089000 audit[3120]: CRED_ACQ pid=3120 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:48.184088 kernel: audit: type=1103 audit(1696282008.089:1167): pid=3120 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:48.446435 sshd[3118]: pam_unix(sshd:session): session closed for user core Oct 2 21:26:48.446000 audit[3118]: USER_END pid=3118 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:48.450109 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 21:26:48.450826 systemd[1]: sshd@11-10.200.20.19:22-10.200.12.6:50006.service: Deactivated successfully. Oct 2 21:26:48.447000 audit[3118]: CRED_DISP pid=3118 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:48.473960 systemd-logind[1338]: Session 14 logged out. Waiting for processes to exit. Oct 2 21:26:48.495404 kernel: audit: type=1106 audit(1696282008.446:1168): pid=3118 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:48.495511 kernel: audit: type=1104 audit(1696282008.447:1169): pid=3118 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:48.449000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.19:22-10.200.12.6:50006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:48.496279 systemd-logind[1338]: Removed session 14. Oct 2 21:26:50.410000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:50.410000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001a43680 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:26:50.410000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:50.410000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:50.410000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001a43660 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:26:50.410000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:50.411000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:50.411000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001a437c0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:26:50.411000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:50.412000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:26:50.412000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40024469c0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:26:50.412000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:26:52.875076 kubelet[2475]: E1002 21:26:52.875048 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:57.876506 kubelet[2475]: E1002 21:26:57.876394 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:26:58.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.19:22-10.200.12.6:41508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:58.517037 systemd[1]: Started sshd@12-10.200.20.19:22-10.200.12.6:41508.service. Oct 2 21:26:58.527259 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 21:26:58.527411 kernel: audit: type=1130 audit(1696282018.516:1175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.19:22-10.200.12.6:41508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:58.706719 env[1353]: time="2023-10-02T21:26:58.706622571Z" level=info msg="CreateContainer within sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 21:26:58.726209 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3431281990.mount: Deactivated successfully. Oct 2 21:26:58.730700 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2427934611.mount: Deactivated successfully. Oct 2 21:26:58.738756 env[1353]: time="2023-10-02T21:26:58.738634652Z" level=info msg="CreateContainer within sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744\"" Oct 2 21:26:58.740311 env[1353]: time="2023-10-02T21:26:58.739390461Z" level=info msg="StartContainer for \"7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744\"" Oct 2 21:26:58.764119 systemd[1]: Started cri-containerd-7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744.scope. Oct 2 21:26:58.780346 systemd[1]: cri-containerd-7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744.scope: Deactivated successfully. Oct 2 21:26:58.803582 env[1353]: time="2023-10-02T21:26:58.803528984Z" level=info msg="shim disconnected" id=7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744 Oct 2 21:26:58.803979 env[1353]: time="2023-10-02T21:26:58.803959629Z" level=warning msg="cleaning up after shim disconnected" id=7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744 namespace=k8s.io Oct 2 21:26:58.804046 env[1353]: time="2023-10-02T21:26:58.804032950Z" level=info msg="cleaning up dead shim" Oct 2 21:26:58.830702 env[1353]: time="2023-10-02T21:26:58.830642170Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:26:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3159 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:26:58Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:26:58.831154 env[1353]: time="2023-10-02T21:26:58.831099655Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 21:26:58.833916 env[1353]: time="2023-10-02T21:26:58.831406179Z" level=error msg="Failed to pipe stdout of container \"7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744\"" error="reading from a closed fifo" Oct 2 21:26:58.834188 env[1353]: time="2023-10-02T21:26:58.834141770Z" level=error msg="Failed to pipe stderr of container \"7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744\"" error="reading from a closed fifo" Oct 2 21:26:58.837477 env[1353]: time="2023-10-02T21:26:58.837423767Z" level=error msg="StartContainer for \"7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:26:58.838095 kubelet[2475]: E1002 21:26:58.837731 2475 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744" Oct 2 21:26:58.838095 kubelet[2475]: E1002 21:26:58.837864 2475 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:26:58.838095 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:26:58.838095 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 21:26:58.838095 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tqbkj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:26:58.838095 kubelet[2475]: E1002 21:26:58.838075 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:26:58.940000 audit[3134]: USER_ACCT pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:58.942297 sshd[3134]: Accepted publickey for core from 10.200.12.6 port 41508 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:26:58.943092 sshd[3134]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:26:58.942000 audit[3134]: CRED_ACQ pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:58.967363 systemd[1]: Started session-15.scope. Oct 2 21:26:58.968277 systemd-logind[1338]: New session 15 of user core. Oct 2 21:26:58.987009 kernel: audit: type=1101 audit(1696282018.940:1176): pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:58.987142 kernel: audit: type=1103 audit(1696282018.942:1177): pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:59.001408 kernel: audit: type=1006 audit(1696282018.942:1178): pid=3134 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 21:26:58.942000 audit[3134]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd140d070 a2=3 a3=1 items=0 ppid=1 pid=3134 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:59.038640 kernel: audit: type=1300 audit(1696282018.942:1178): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd140d070 a2=3 a3=1 items=0 ppid=1 pid=3134 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:26:58.942000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:59.046892 kernel: audit: type=1327 audit(1696282018.942:1178): proctitle=737368643A20636F7265205B707269765D Oct 2 21:26:58.987000 audit[3134]: USER_START pid=3134 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:59.073315 kernel: audit: type=1105 audit(1696282018.987:1179): pid=3134 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:59.073420 kernel: audit: type=1103 audit(1696282018.991:1180): pid=3172 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:58.991000 audit[3172]: CRED_ACQ pid=3172 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:59.158543 kubelet[2475]: I1002 21:26:59.158517 2475 scope.go:115] "RemoveContainer" containerID="b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed" Oct 2 21:26:59.159306 kubelet[2475]: I1002 21:26:59.159292 2475 scope.go:115] "RemoveContainer" containerID="b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed" Oct 2 21:26:59.173279 env[1353]: time="2023-10-02T21:26:59.169128584Z" level=info msg="RemoveContainer for \"b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed\"" Oct 2 21:26:59.173279 env[1353]: time="2023-10-02T21:26:59.169907793Z" level=info msg="RemoveContainer for \"b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed\"" Oct 2 21:26:59.173279 env[1353]: time="2023-10-02T21:26:59.169990714Z" level=error msg="RemoveContainer for \"b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed\" failed" error="failed to set removing state for container \"b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed\": container is already in removing state" Oct 2 21:26:59.173435 kubelet[2475]: E1002 21:26:59.170139 2475 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed\": container is already in removing state" containerID="b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed" Oct 2 21:26:59.173435 kubelet[2475]: E1002 21:26:59.170168 2475 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed": container is already in removing state; Skipping pod "cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)" Oct 2 21:26:59.173435 kubelet[2475]: E1002 21:26:59.170442 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:26:59.178800 env[1353]: time="2023-10-02T21:26:59.178756010Z" level=info msg="RemoveContainer for \"b58a3e65af3e51718eb813d12d587b37e6ef70167ea662bd7cc4dc316150c1ed\" returns successfully" Oct 2 21:26:59.331195 sshd[3134]: pam_unix(sshd:session): session closed for user core Oct 2 21:26:59.332000 audit[3134]: USER_END pid=3134 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:59.335212 systemd-logind[1338]: Session 15 logged out. Waiting for processes to exit. Oct 2 21:26:59.336640 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 21:26:59.337828 systemd-logind[1338]: Removed session 15. Oct 2 21:26:59.338539 systemd[1]: sshd@12-10.200.20.19:22-10.200.12.6:41508.service: Deactivated successfully. Oct 2 21:26:59.332000 audit[3134]: CRED_DISP pid=3134 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:59.383037 kernel: audit: type=1106 audit(1696282019.332:1181): pid=3134 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:59.383185 kernel: audit: type=1104 audit(1696282019.332:1182): pid=3134 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:26:59.338000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.19:22-10.200.12.6:41508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:26:59.723835 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744-rootfs.mount: Deactivated successfully. Oct 2 21:27:01.909408 kubelet[2475]: W1002 21:27:01.909366 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4daf26a8_9c4d_49c0_8fa8_cfc59855696c.slice/cri-containerd-7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744.scope WatchSource:0}: task 7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744 not found: not found Oct 2 21:27:02.878015 kubelet[2475]: E1002 21:27:02.877978 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:07.878850 kubelet[2475]: E1002 21:27:07.878821 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:09.397254 systemd[1]: Started sshd@13-10.200.20.19:22-10.200.12.6:44244.service. Oct 2 21:27:09.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.19:22-10.200.12.6:44244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:09.403404 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:27:09.403553 kernel: audit: type=1130 audit(1696282029.397:1184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.19:22-10.200.12.6:44244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:09.810000 audit[3183]: USER_ACCT pid=3183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:09.816486 sshd[3183]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:27:09.836133 sshd[3183]: Accepted publickey for core from 10.200.12.6 port 44244 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:27:09.815000 audit[3183]: CRED_ACQ pid=3183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:09.866545 kernel: audit: type=1101 audit(1696282029.810:1185): pid=3183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:09.866646 kernel: audit: type=1103 audit(1696282029.815:1186): pid=3183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:09.880632 kernel: audit: type=1006 audit(1696282029.815:1187): pid=3183 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 21:27:09.815000 audit[3183]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef77bdd0 a2=3 a3=1 items=0 ppid=1 pid=3183 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:09.906826 kernel: audit: type=1300 audit(1696282029.815:1187): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef77bdd0 a2=3 a3=1 items=0 ppid=1 pid=3183 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:09.815000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:09.911808 systemd[1]: Started session-16.scope. Oct 2 21:27:09.922884 kernel: audit: type=1327 audit(1696282029.815:1187): proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:09.922987 systemd-logind[1338]: New session 16 of user core. Oct 2 21:27:09.928000 audit[3183]: USER_START pid=3183 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:09.932000 audit[3188]: CRED_ACQ pid=3188 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:09.979639 kernel: audit: type=1105 audit(1696282029.928:1188): pid=3183 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:09.979899 kernel: audit: type=1103 audit(1696282029.932:1189): pid=3188 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:10.251263 sshd[3183]: pam_unix(sshd:session): session closed for user core Oct 2 21:27:10.252000 audit[3183]: USER_END pid=3183 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:10.254837 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 21:27:10.255547 systemd[1]: sshd@13-10.200.20.19:22-10.200.12.6:44244.service: Deactivated successfully. Oct 2 21:27:10.253000 audit[3183]: CRED_DISP pid=3183 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:10.279727 systemd-logind[1338]: Session 16 logged out. Waiting for processes to exit. Oct 2 21:27:10.280569 systemd-logind[1338]: Removed session 16. Oct 2 21:27:10.300254 kernel: audit: type=1106 audit(1696282030.252:1190): pid=3183 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:10.300372 kernel: audit: type=1104 audit(1696282030.253:1191): pid=3183 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:10.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.19:22-10.200.12.6:44244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:12.704847 kubelet[2475]: E1002 21:27:12.704814 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:27:12.880590 kubelet[2475]: E1002 21:27:12.880564 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:17.882175 kubelet[2475]: E1002 21:27:17.882140 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:20.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.19:22-10.200.12.6:59918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:20.326429 systemd[1]: Started sshd@14-10.200.20.19:22-10.200.12.6:59918.service. Oct 2 21:27:20.334337 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:27:20.334447 kernel: audit: type=1130 audit(1696282040.326:1193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.19:22-10.200.12.6:59918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:20.776000 audit[3198]: USER_ACCT pid=3198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:20.777315 sshd[3198]: Accepted publickey for core from 10.200.12.6 port 59918 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:27:20.779646 sshd[3198]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:27:20.779000 audit[3198]: CRED_ACQ pid=3198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:20.806126 systemd[1]: Started session-17.scope. Oct 2 21:27:20.808076 systemd-logind[1338]: New session 17 of user core. Oct 2 21:27:20.824049 kernel: audit: type=1101 audit(1696282040.776:1194): pid=3198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:20.824333 kernel: audit: type=1103 audit(1696282040.779:1195): pid=3198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:20.840208 kernel: audit: type=1006 audit(1696282040.779:1196): pid=3198 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 21:27:20.779000 audit[3198]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcdcd0b70 a2=3 a3=1 items=0 ppid=1 pid=3198 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:20.864099 kernel: audit: type=1300 audit(1696282040.779:1196): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcdcd0b70 a2=3 a3=1 items=0 ppid=1 pid=3198 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:20.779000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:20.872570 kernel: audit: type=1327 audit(1696282040.779:1196): proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:20.840000 audit[3198]: USER_START pid=3198 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:20.899713 kernel: audit: type=1105 audit(1696282040.840:1197): pid=3198 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:20.844000 audit[3200]: CRED_ACQ pid=3200 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:20.920667 kernel: audit: type=1103 audit(1696282040.844:1198): pid=3200 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:21.180460 sshd[3198]: pam_unix(sshd:session): session closed for user core Oct 2 21:27:21.181000 audit[3198]: USER_END pid=3198 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:21.184544 systemd-logind[1338]: Session 17 logged out. Waiting for processes to exit. Oct 2 21:27:21.185661 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 21:27:21.186905 systemd-logind[1338]: Removed session 17. Oct 2 21:27:21.187531 systemd[1]: sshd@14-10.200.20.19:22-10.200.12.6:59918.service: Deactivated successfully. Oct 2 21:27:21.182000 audit[3198]: CRED_DISP pid=3198 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:21.230418 kernel: audit: type=1106 audit(1696282041.181:1199): pid=3198 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:21.230553 kernel: audit: type=1104 audit(1696282041.182:1200): pid=3198 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:21.187000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.19:22-10.200.12.6:59918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:22.882878 kubelet[2475]: E1002 21:27:22.882854 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:27.704310 kubelet[2475]: E1002 21:27:27.704270 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:27:27.884651 kubelet[2475]: E1002 21:27:27.884625 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:31.248266 systemd[1]: Started sshd@15-10.200.20.19:22-10.200.12.6:38354.service. Oct 2 21:27:31.275985 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:27:31.276105 kernel: audit: type=1130 audit(1696282051.247:1202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.19:22-10.200.12.6:38354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:31.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.19:22-10.200.12.6:38354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:31.652000 audit[3217]: USER_ACCT pid=3217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:31.654107 sshd[3217]: Accepted publickey for core from 10.200.12.6 port 38354 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:27:31.656401 sshd[3217]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:27:31.654000 audit[3217]: CRED_ACQ pid=3217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:31.700403 kernel: audit: type=1101 audit(1696282051.652:1203): pid=3217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:31.700557 kernel: audit: type=1103 audit(1696282051.654:1204): pid=3217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:31.728486 kernel: audit: type=1006 audit(1696282051.654:1205): pid=3217 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 21:27:31.729514 kernel: audit: type=1300 audit(1696282051.654:1205): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6f418a0 a2=3 a3=1 items=0 ppid=1 pid=3217 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:31.654000 audit[3217]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6f418a0 a2=3 a3=1 items=0 ppid=1 pid=3217 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:31.654000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:31.763252 kernel: audit: type=1327 audit(1696282051.654:1205): proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:31.765356 systemd-logind[1338]: New session 18 of user core. Oct 2 21:27:31.765861 systemd[1]: Started session-18.scope. Oct 2 21:27:31.769000 audit[3217]: USER_START pid=3217 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:31.772000 audit[3219]: CRED_ACQ pid=3219 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:31.833958 kernel: audit: type=1105 audit(1696282051.769:1206): pid=3217 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:31.834148 kernel: audit: type=1103 audit(1696282051.772:1207): pid=3219 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:32.086444 sshd[3217]: pam_unix(sshd:session): session closed for user core Oct 2 21:27:32.086000 audit[3217]: USER_END pid=3217 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:32.090363 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 21:27:32.091175 systemd[1]: sshd@15-10.200.20.19:22-10.200.12.6:38354.service: Deactivated successfully. Oct 2 21:27:32.087000 audit[3217]: CRED_DISP pid=3217 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:32.148623 kernel: audit: type=1106 audit(1696282052.086:1208): pid=3217 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:32.148742 kernel: audit: type=1104 audit(1696282052.087:1209): pid=3217 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:32.148623 systemd-logind[1338]: Session 18 logged out. Waiting for processes to exit. Oct 2 21:27:32.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.19:22-10.200.12.6:38354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:32.149700 systemd-logind[1338]: Removed session 18. Oct 2 21:27:32.765000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:32.765000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000b35470 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:27:32.765000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:32.766000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:32.766000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400085e980 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:27:32.766000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:32.885656 kubelet[2475]: E1002 21:27:32.885621 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:33.125000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:33.125000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:33.125000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400537ac80 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:27:33.125000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:27:33.125000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40052a1ef0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:27:33.125000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:27:33.180000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:33.180000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4003624ab0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:27:33.180000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:27:33.180000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:33.180000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40052a1fb0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:27:33.180000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:27:33.180000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:33.180000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400537ace0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:27:33.180000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:27:33.181000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:33.181000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4003624bd0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:27:33.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:27:37.886549 kubelet[2475]: E1002 21:27:37.886506 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:41.703984 kubelet[2475]: E1002 21:27:41.703950 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:27:42.153000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.19:22-10.200.12.6:43920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:42.154301 systemd[1]: Started sshd@16-10.200.20.19:22-10.200.12.6:43920.service. Oct 2 21:27:42.159691 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 21:27:42.159789 kernel: audit: type=1130 audit(1696282062.153:1219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.19:22-10.200.12.6:43920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:42.566000 audit[3233]: USER_ACCT pid=3233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:42.568206 sshd[3233]: Accepted publickey for core from 10.200.12.6 port 43920 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:27:42.592519 sshd[3233]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:27:42.591000 audit[3233]: CRED_ACQ pid=3233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:42.593282 kernel: audit: type=1101 audit(1696282062.566:1220): pid=3233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:42.644879 kernel: audit: type=1103 audit(1696282062.591:1221): pid=3233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:42.644982 kernel: audit: type=1006 audit(1696282062.591:1222): pid=3233 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 21:27:42.591000 audit[3233]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed36c530 a2=3 a3=1 items=0 ppid=1 pid=3233 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:42.669690 kernel: audit: type=1300 audit(1696282062.591:1222): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed36c530 a2=3 a3=1 items=0 ppid=1 pid=3233 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:42.591000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:42.678813 kernel: audit: type=1327 audit(1696282062.591:1222): proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:42.681307 systemd[1]: Started session-19.scope. Oct 2 21:27:42.682032 systemd-logind[1338]: New session 19 of user core. Oct 2 21:27:42.685000 audit[3233]: USER_START pid=3233 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:42.689000 audit[3235]: CRED_ACQ pid=3235 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:42.735702 kernel: audit: type=1105 audit(1696282062.685:1223): pid=3233 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:42.735854 kernel: audit: type=1103 audit(1696282062.689:1224): pid=3235 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:42.887357 kubelet[2475]: E1002 21:27:42.887325 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:43.003535 sshd[3233]: pam_unix(sshd:session): session closed for user core Oct 2 21:27:43.003000 audit[3233]: USER_END pid=3233 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:43.018062 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 21:27:43.019204 systemd[1]: sshd@16-10.200.20.19:22-10.200.12.6:43920.service: Deactivated successfully. Oct 2 21:27:43.008000 audit[3233]: CRED_DISP pid=3233 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:43.049009 systemd-logind[1338]: Session 19 logged out. Waiting for processes to exit. Oct 2 21:27:43.050712 systemd-logind[1338]: Removed session 19. Oct 2 21:27:43.071523 kernel: audit: type=1106 audit(1696282063.003:1225): pid=3233 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:43.071670 kernel: audit: type=1104 audit(1696282063.008:1226): pid=3233 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:43.018000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.19:22-10.200.12.6:43920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:43.077777 systemd[1]: Started sshd@17-10.200.20.19:22-10.200.12.6:43930.service. Oct 2 21:27:43.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.19:22-10.200.12.6:43930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:43.482000 audit[3245]: USER_ACCT pid=3245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:43.484344 sshd[3245]: Accepted publickey for core from 10.200.12.6 port 43930 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:27:43.484000 audit[3245]: CRED_ACQ pid=3245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:43.484000 audit[3245]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd0dda50 a2=3 a3=1 items=0 ppid=1 pid=3245 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:43.484000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:43.486341 sshd[3245]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:27:43.491079 systemd[1]: Started session-20.scope. Oct 2 21:27:43.491578 systemd-logind[1338]: New session 20 of user core. Oct 2 21:27:43.494000 audit[3245]: USER_START pid=3245 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:43.497000 audit[3247]: CRED_ACQ pid=3247 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:44.480464 sshd[3245]: pam_unix(sshd:session): session closed for user core Oct 2 21:27:44.480000 audit[3245]: USER_END pid=3245 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:44.480000 audit[3245]: CRED_DISP pid=3245 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:44.482000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.19:22-10.200.12.6:43930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:44.483609 systemd[1]: sshd@17-10.200.20.19:22-10.200.12.6:43930.service: Deactivated successfully. Oct 2 21:27:44.484419 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 21:27:44.484994 systemd-logind[1338]: Session 20 logged out. Waiting for processes to exit. Oct 2 21:27:44.485725 systemd-logind[1338]: Removed session 20. Oct 2 21:27:44.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.19:22-10.200.12.6:43940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:44.555087 systemd[1]: Started sshd@18-10.200.20.19:22-10.200.12.6:43940.service. Oct 2 21:27:45.003000 audit[3255]: USER_ACCT pid=3255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:45.004551 sshd[3255]: Accepted publickey for core from 10.200.12.6 port 43940 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:27:45.005000 audit[3255]: CRED_ACQ pid=3255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:45.005000 audit[3255]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce8b4330 a2=3 a3=1 items=0 ppid=1 pid=3255 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:45.005000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:45.007611 sshd[3255]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:27:45.012779 systemd[1]: Started session-21.scope. Oct 2 21:27:45.013348 systemd-logind[1338]: New session 21 of user core. Oct 2 21:27:45.016000 audit[3255]: USER_START pid=3255 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:45.019000 audit[3257]: CRED_ACQ pid=3257 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:45.407423 sshd[3255]: pam_unix(sshd:session): session closed for user core Oct 2 21:27:45.407000 audit[3255]: USER_END pid=3255 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:45.407000 audit[3255]: CRED_DISP pid=3255 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:45.410000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.19:22-10.200.12.6:43940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:45.411733 systemd[1]: sshd@18-10.200.20.19:22-10.200.12.6:43940.service: Deactivated successfully. Oct 2 21:27:45.412569 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 21:27:45.413279 systemd-logind[1338]: Session 21 logged out. Waiting for processes to exit. Oct 2 21:27:45.414131 systemd-logind[1338]: Removed session 21. Oct 2 21:27:47.888774 kubelet[2475]: E1002 21:27:47.888739 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:50.412000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:50.423040 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 21:27:50.423199 kernel: audit: type=1400 audit(1696282070.412:1246): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:50.412000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000dbc780 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:27:50.480327 kernel: audit: type=1300 audit(1696282070.412:1246): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000dbc780 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:27:50.412000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:50.506363 kernel: audit: type=1327 audit(1696282070.412:1246): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:50.506659 kernel: audit: type=1400 audit(1696282070.412:1247): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:50.412000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:50.412000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40016ed8e0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:27:50.571940 kernel: audit: type=1300 audit(1696282070.412:1247): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40016ed8e0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:27:50.412000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:50.597758 kernel: audit: type=1327 audit(1696282070.412:1247): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:50.597900 kernel: audit: type=1400 audit(1696282070.412:1248): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:50.412000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:50.412000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000dbc9a0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:27:50.663934 kernel: audit: type=1300 audit(1696282070.412:1248): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000dbc9a0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:27:50.412000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:50.691581 kernel: audit: type=1327 audit(1696282070.412:1248): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:50.691733 kernel: audit: type=1400 audit(1696282070.413:1249): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:50.413000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:27:50.413000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000dbcac0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:27:50.413000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:27:52.890420 kubelet[2475]: E1002 21:27:52.890387 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:27:55.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.19:22-10.200.12.6:36640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:55.475397 systemd[1]: Started sshd@19-10.200.20.19:22-10.200.12.6:36640.service. Oct 2 21:27:55.480532 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:27:55.480612 kernel: audit: type=1130 audit(1696282075.474:1250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.19:22-10.200.12.6:36640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:55.704608 kubelet[2475]: E1002 21:27:55.704369 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:27:55.881000 audit[3271]: USER_ACCT pid=3271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:55.883257 sshd[3271]: Accepted publickey for core from 10.200.12.6 port 36640 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:27:55.906000 audit[3271]: CRED_ACQ pid=3271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:55.908005 sshd[3271]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:27:55.930975 kernel: audit: type=1101 audit(1696282075.881:1251): pid=3271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:55.931120 kernel: audit: type=1103 audit(1696282075.906:1252): pid=3271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:55.945020 kernel: audit: type=1006 audit(1696282075.906:1253): pid=3271 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 21:27:55.946396 kernel: audit: type=1300 audit(1696282075.906:1253): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc05c6e0 a2=3 a3=1 items=0 ppid=1 pid=3271 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:55.906000 audit[3271]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc05c6e0 a2=3 a3=1 items=0 ppid=1 pid=3271 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:27:55.906000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:55.978471 kernel: audit: type=1327 audit(1696282075.906:1253): proctitle=737368643A20636F7265205B707269765D Oct 2 21:27:55.980445 systemd-logind[1338]: New session 22 of user core. Oct 2 21:27:55.980886 systemd[1]: Started session-22.scope. Oct 2 21:27:55.984000 audit[3271]: USER_START pid=3271 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:56.018282 kernel: audit: type=1105 audit(1696282075.984:1254): pid=3271 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:56.018000 audit[3273]: CRED_ACQ pid=3273 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:56.050257 kernel: audit: type=1103 audit(1696282076.018:1255): pid=3273 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:56.334417 sshd[3271]: pam_unix(sshd:session): session closed for user core Oct 2 21:27:56.334000 audit[3271]: USER_END pid=3271 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:56.338741 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 21:27:56.339517 systemd[1]: sshd@19-10.200.20.19:22-10.200.12.6:36640.service: Deactivated successfully. Oct 2 21:27:56.335000 audit[3271]: CRED_DISP pid=3271 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:56.382906 kernel: audit: type=1106 audit(1696282076.334:1256): pid=3271 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:56.383026 kernel: audit: type=1104 audit(1696282076.335:1257): pid=3271 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:27:56.338000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.19:22-10.200.12.6:36640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:27:56.383210 systemd-logind[1338]: Session 22 logged out. Waiting for processes to exit. Oct 2 21:27:56.384219 systemd-logind[1338]: Removed session 22. Oct 2 21:27:57.891914 kubelet[2475]: E1002 21:27:57.891833 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:02.892612 kubelet[2475]: E1002 21:28:02.892574 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:06.447177 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:28:06.447323 kernel: audit: type=1130 audit(1696282086.403:1259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.19:22-10.200.12.6:44626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:06.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.19:22-10.200.12.6:44626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:06.404412 systemd[1]: Started sshd@20-10.200.20.19:22-10.200.12.6:44626.service. Oct 2 21:28:06.815429 sshd[3283]: Accepted publickey for core from 10.200.12.6 port 44626 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:28:06.814000 audit[3283]: USER_ACCT pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:06.818254 sshd[3283]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:28:06.814000 audit[3283]: CRED_ACQ pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:06.872579 kernel: audit: type=1101 audit(1696282086.814:1260): pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:06.872756 kernel: audit: type=1103 audit(1696282086.814:1261): pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:06.886479 kernel: audit: type=1006 audit(1696282086.814:1262): pid=3283 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 21:28:06.814000 audit[3283]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe982a770 a2=3 a3=1 items=0 ppid=1 pid=3283 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:06.889938 systemd[1]: Started session-23.scope. Oct 2 21:28:06.891371 systemd-logind[1338]: New session 23 of user core. Oct 2 21:28:06.913978 kernel: audit: type=1300 audit(1696282086.814:1262): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe982a770 a2=3 a3=1 items=0 ppid=1 pid=3283 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:06.814000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:06.929445 kernel: audit: type=1327 audit(1696282086.814:1262): proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:06.913000 audit[3283]: USER_START pid=3283 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:06.958806 kernel: audit: type=1105 audit(1696282086.913:1263): pid=3283 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:06.958911 kernel: audit: type=1103 audit(1696282086.924:1264): pid=3285 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:06.924000 audit[3285]: CRED_ACQ pid=3285 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:07.254431 sshd[3283]: pam_unix(sshd:session): session closed for user core Oct 2 21:28:07.254000 audit[3283]: USER_END pid=3283 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:07.257961 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 21:28:07.258955 systemd[1]: sshd@20-10.200.20.19:22-10.200.12.6:44626.service: Deactivated successfully. Oct 2 21:28:07.254000 audit[3283]: CRED_DISP pid=3283 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:07.282353 systemd-logind[1338]: Session 23 logged out. Waiting for processes to exit. Oct 2 21:28:07.303793 kernel: audit: type=1106 audit(1696282087.254:1265): pid=3283 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:07.303932 kernel: audit: type=1104 audit(1696282087.254:1266): pid=3283 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:07.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.19:22-10.200.12.6:44626 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:07.304535 systemd-logind[1338]: Removed session 23. Oct 2 21:28:07.893910 kubelet[2475]: E1002 21:28:07.893886 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:10.704715 kubelet[2475]: E1002 21:28:10.704653 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:28:12.895991 kubelet[2475]: E1002 21:28:12.895966 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:17.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.19:22-10.200.12.6:57740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:17.329919 systemd[1]: Started sshd@21-10.200.20.19:22-10.200.12.6:57740.service. Oct 2 21:28:17.335143 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:28:17.335246 kernel: audit: type=1130 audit(1696282097.328:1268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.19:22-10.200.12.6:57740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:17.769000 audit[3295]: USER_ACCT pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:17.771280 sshd[3295]: Accepted publickey for core from 10.200.12.6 port 57740 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:28:17.794282 kernel: audit: type=1101 audit(1696282097.769:1269): pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:17.794000 audit[3295]: CRED_ACQ pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:17.796410 sshd[3295]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:28:17.843265 kernel: audit: type=1103 audit(1696282097.794:1270): pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:17.843453 kernel: audit: type=1006 audit(1696282097.794:1271): pid=3295 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 21:28:17.794000 audit[3295]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1fd1980 a2=3 a3=1 items=0 ppid=1 pid=3295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:17.866842 kernel: audit: type=1300 audit(1696282097.794:1271): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1fd1980 a2=3 a3=1 items=0 ppid=1 pid=3295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:17.867490 kernel: audit: type=1327 audit(1696282097.794:1271): proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:17.794000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:17.879018 systemd-logind[1338]: New session 24 of user core. Oct 2 21:28:17.879635 systemd[1]: Started session-24.scope. Oct 2 21:28:17.882000 audit[3295]: USER_START pid=3295 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:17.914621 kernel: audit: type=1105 audit(1696282097.882:1272): pid=3295 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:17.914758 kernel: audit: type=1103 audit(1696282097.912:1273): pid=3297 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:17.912000 audit[3297]: CRED_ACQ pid=3297 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:17.914876 kubelet[2475]: E1002 21:28:17.914534 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:18.243497 sshd[3295]: pam_unix(sshd:session): session closed for user core Oct 2 21:28:18.243000 audit[3295]: USER_END pid=3295 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:18.243000 audit[3295]: CRED_DISP pid=3295 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:18.292478 kernel: audit: type=1106 audit(1696282098.243:1274): pid=3295 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:18.292615 kernel: audit: type=1104 audit(1696282098.243:1275): pid=3295 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:18.292950 systemd[1]: sshd@21-10.200.20.19:22-10.200.12.6:57740.service: Deactivated successfully. Oct 2 21:28:18.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.19:22-10.200.12.6:57740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:18.293780 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 21:28:18.294535 systemd-logind[1338]: Session 24 logged out. Waiting for processes to exit. Oct 2 21:28:18.295532 systemd-logind[1338]: Removed session 24. Oct 2 21:28:22.704736 kubelet[2475]: E1002 21:28:22.704703 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:28:22.915933 kubelet[2475]: E1002 21:28:22.915889 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:26.072608 update_engine[1340]: I1002 21:28:26.072458 1340 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 21:28:26.072608 update_engine[1340]: I1002 21:28:26.072494 1340 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 21:28:26.073087 update_engine[1340]: I1002 21:28:26.072654 1340 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 21:28:26.073087 update_engine[1340]: I1002 21:28:26.072981 1340 omaha_request_params.cc:62] Current group set to lts Oct 2 21:28:26.073136 update_engine[1340]: I1002 21:28:26.073103 1340 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 21:28:26.073136 update_engine[1340]: I1002 21:28:26.073108 1340 update_attempter.cc:638] Scheduling an action processor start. Oct 2 21:28:26.073136 update_engine[1340]: I1002 21:28:26.073127 1340 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 21:28:26.073205 update_engine[1340]: I1002 21:28:26.073155 1340 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 21:28:26.073569 locksmithd[1434]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 21:28:26.201109 update_engine[1340]: I1002 21:28:26.201061 1340 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 21:28:26.201109 update_engine[1340]: I1002 21:28:26.201095 1340 omaha_request_action.cc:269] Request: Oct 2 21:28:26.201109 update_engine[1340]: Oct 2 21:28:26.201109 update_engine[1340]: Oct 2 21:28:26.201109 update_engine[1340]: Oct 2 21:28:26.201109 update_engine[1340]: Oct 2 21:28:26.201109 update_engine[1340]: Oct 2 21:28:26.201109 update_engine[1340]: Oct 2 21:28:26.201109 update_engine[1340]: Oct 2 21:28:26.201109 update_engine[1340]: Oct 2 21:28:26.201109 update_engine[1340]: I1002 21:28:26.201103 1340 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 21:28:26.203193 update_engine[1340]: I1002 21:28:26.203162 1340 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 21:28:26.203424 update_engine[1340]: I1002 21:28:26.203402 1340 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 21:28:27.260618 update_engine[1340]: I1002 21:28:27.260577 1340 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 21:28:27.260927 update_engine[1340]: I1002 21:28:27.260833 1340 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 21:28:27.261018 update_engine[1340]: I1002 21:28:27.260993 1340 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 21:28:27.609702 update_engine[1340]: I1002 21:28:27.609567 1340 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 21:28:27.611486 update_engine[1340]: I1002 21:28:27.611443 1340 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 21:28:27.611486 update_engine[1340]: I1002 21:28:27.611475 1340 omaha_request_action.cc:619] Omaha request response: Oct 2 21:28:27.611486 update_engine[1340]: Oct 2 21:28:27.900605 update_engine[1340]: I1002 21:28:27.900569 1340 omaha_request_action.cc:409] No update. Oct 2 21:28:27.900605 update_engine[1340]: I1002 21:28:27.900607 1340 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 21:28:27.900605 update_engine[1340]: I1002 21:28:27.900611 1340 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 21:28:27.900797 update_engine[1340]: I1002 21:28:27.900616 1340 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 21:28:27.900797 update_engine[1340]: I1002 21:28:27.900620 1340 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 21:28:27.900797 update_engine[1340]: I1002 21:28:27.900624 1340 update_attempter.cc:302] Processing Done. Oct 2 21:28:27.900797 update_engine[1340]: I1002 21:28:27.900637 1340 update_attempter.cc:338] No update. Oct 2 21:28:27.900797 update_engine[1340]: I1002 21:28:27.900647 1340 update_check_scheduler.cc:74] Next update check in 40m44s Oct 2 21:28:27.900986 locksmithd[1434]: LastCheckedTime=1696282107 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 21:28:27.917001 kubelet[2475]: E1002 21:28:27.916967 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:28.318559 systemd[1]: Started sshd@22-10.200.20.19:22-10.200.12.6:48584.service. Oct 2 21:28:28.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.19:22-10.200.12.6:48584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:28.352719 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:28:28.352795 kernel: audit: type=1130 audit(1696282108.318:1277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.19:22-10.200.12.6:48584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:28.730000 audit[3309]: USER_ACCT pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:28.731982 sshd[3309]: Accepted publickey for core from 10.200.12.6 port 48584 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:28:28.756998 sshd[3309]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:28:28.757295 kernel: audit: type=1101 audit(1696282108.730:1278): pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:28.757349 kernel: audit: type=1103 audit(1696282108.755:1279): pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:28.755000 audit[3309]: CRED_ACQ pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:28.793981 kernel: audit: type=1006 audit(1696282108.755:1280): pid=3309 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 21:28:28.755000 audit[3309]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8f89bf0 a2=3 a3=1 items=0 ppid=1 pid=3309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:28.829896 kernel: audit: type=1300 audit(1696282108.755:1280): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8f89bf0 a2=3 a3=1 items=0 ppid=1 pid=3309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:28.755000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:28.838840 kernel: audit: type=1327 audit(1696282108.755:1280): proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:28.841204 systemd-logind[1338]: New session 25 of user core. Oct 2 21:28:28.841758 systemd[1]: Started session-25.scope. Oct 2 21:28:28.845000 audit[3309]: USER_START pid=3309 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:28.848000 audit[3311]: CRED_ACQ pid=3311 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:28.893921 kernel: audit: type=1105 audit(1696282108.845:1281): pid=3309 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:28.894049 kernel: audit: type=1103 audit(1696282108.848:1282): pid=3311 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:29.178486 sshd[3309]: pam_unix(sshd:session): session closed for user core Oct 2 21:28:29.178000 audit[3309]: USER_END pid=3309 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:29.181207 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 21:28:29.181919 systemd[1]: sshd@22-10.200.20.19:22-10.200.12.6:48584.service: Deactivated successfully. Oct 2 21:28:29.178000 audit[3309]: CRED_DISP pid=3309 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:29.242334 kernel: audit: type=1106 audit(1696282109.178:1283): pid=3309 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:29.242475 kernel: audit: type=1104 audit(1696282109.178:1284): pid=3309 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:29.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.19:22-10.200.12.6:48584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:29.242806 systemd-logind[1338]: Session 25 logged out. Waiting for processes to exit. Oct 2 21:28:29.243899 systemd-logind[1338]: Removed session 25. Oct 2 21:28:32.766000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:32.766000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40017fd980 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:28:32.766000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:32.767000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:32.767000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000c6fe60 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:28:32.767000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:32.918373 kubelet[2475]: E1002 21:28:32.918345 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:33.127000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:33.127000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=401133c840 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:28:33.127000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:28:33.127000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:33.127000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400bc9b000 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:28:33.127000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:28:33.181000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:33.181000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=401129d890 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:28:33.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:28:33.181000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:33.181000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=401129d8c0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:28:33.181000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:33.181000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=401133ca50 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:28:33.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:28:33.181000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:33.181000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400bc9b100 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:28:33.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:28:33.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:28:37.705740 kubelet[2475]: E1002 21:28:37.705516 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:28:37.811796 kubelet[2475]: W1002 21:28:37.811766 2475 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 21:28:37.920074 kubelet[2475]: E1002 21:28:37.920025 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:39.251602 systemd[1]: Started sshd@23-10.200.20.19:22-10.200.12.6:52438.service. Oct 2 21:28:39.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.19:22-10.200.12.6:52438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:39.260611 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 21:28:39.260725 kernel: audit: type=1130 audit(1696282119.250:1294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.19:22-10.200.12.6:52438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:39.696000 audit[3324]: USER_ACCT pid=3324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:39.698427 sshd[3324]: Accepted publickey for core from 10.200.12.6 port 52438 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:28:39.739353 kernel: audit: type=1101 audit(1696282119.696:1295): pid=3324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:39.739000 audit[3324]: CRED_ACQ pid=3324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:39.741337 sshd[3324]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:28:39.778627 kernel: audit: type=1103 audit(1696282119.739:1296): pid=3324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:39.778807 kernel: audit: type=1006 audit(1696282119.739:1297): pid=3324 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 21:28:39.739000 audit[3324]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff2e21380 a2=3 a3=1 items=0 ppid=1 pid=3324 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:39.782028 systemd[1]: Started session-26.scope. Oct 2 21:28:39.783345 systemd-logind[1338]: New session 26 of user core. Oct 2 21:28:39.803776 kernel: audit: type=1300 audit(1696282119.739:1297): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff2e21380 a2=3 a3=1 items=0 ppid=1 pid=3324 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:39.739000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:39.820251 kernel: audit: type=1327 audit(1696282119.739:1297): proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:39.803000 audit[3324]: USER_START pid=3324 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:39.853862 kernel: audit: type=1105 audit(1696282119.803:1298): pid=3324 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:39.821000 audit[3326]: CRED_ACQ pid=3326 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:39.875026 kernel: audit: type=1103 audit(1696282119.821:1299): pid=3326 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:40.168440 sshd[3324]: pam_unix(sshd:session): session closed for user core Oct 2 21:28:40.168000 audit[3324]: USER_END pid=3324 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:40.171918 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 21:28:40.172661 systemd[1]: sshd@23-10.200.20.19:22-10.200.12.6:52438.service: Deactivated successfully. Oct 2 21:28:40.169000 audit[3324]: CRED_DISP pid=3324 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:40.229188 kernel: audit: type=1106 audit(1696282120.168:1300): pid=3324 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:40.229393 kernel: audit: type=1104 audit(1696282120.169:1301): pid=3324 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:40.229495 systemd-logind[1338]: Session 26 logged out. Waiting for processes to exit. Oct 2 21:28:40.171000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.19:22-10.200.12.6:52438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:40.230738 systemd-logind[1338]: Removed session 26. Oct 2 21:28:42.921356 kubelet[2475]: E1002 21:28:42.921311 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:47.922490 kubelet[2475]: E1002 21:28:47.922461 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:50.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.19:22-10.200.12.6:48828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:50.237018 systemd[1]: Started sshd@24-10.200.20.19:22-10.200.12.6:48828.service. Oct 2 21:28:50.243615 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:28:50.243734 kernel: audit: type=1130 audit(1696282130.235:1303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.19:22-10.200.12.6:48828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:50.413000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:50.413000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027a9180 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:28:50.477011 kernel: audit: type=1400 audit(1696282130.413:1304): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:50.477167 kernel: audit: type=1300 audit(1696282130.413:1304): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027a9180 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:28:50.413000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:50.502298 kernel: audit: type=1327 audit(1696282130.413:1304): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:50.413000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:50.538501 kernel: audit: type=1400 audit(1696282130.413:1305): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:50.413000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027a91a0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:28:50.570853 kernel: audit: type=1300 audit(1696282130.413:1305): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027a91a0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:28:50.570995 kernel: audit: type=1327 audit(1696282130.413:1305): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:50.413000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:50.596289 kernel: audit: type=1400 audit(1696282130.413:1306): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:50.413000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:50.413000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027a92e0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:28:50.663368 kernel: audit: type=1300 audit(1696282130.413:1306): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40027a92e0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:28:50.413000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:50.688417 kernel: audit: type=1327 audit(1696282130.413:1306): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:50.415000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:28:50.415000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002512ca0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:28:50.415000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:28:50.734000 audit[3336]: USER_ACCT pid=3336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:50.736393 sshd[3336]: Accepted publickey for core from 10.200.12.6 port 48828 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:28:50.736000 audit[3336]: CRED_ACQ pid=3336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:50.737000 audit[3336]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb66ae40 a2=3 a3=1 items=0 ppid=1 pid=3336 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:28:50.737000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:28:50.738814 sshd[3336]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:28:50.743063 systemd-logind[1338]: New session 27 of user core. Oct 2 21:28:50.743617 systemd[1]: Started session-27.scope. Oct 2 21:28:50.746000 audit[3336]: USER_START pid=3336 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:50.749000 audit[3338]: CRED_ACQ pid=3338 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:51.109034 sshd[3336]: pam_unix(sshd:session): session closed for user core Oct 2 21:28:51.109000 audit[3336]: USER_END pid=3336 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:51.109000 audit[3336]: CRED_DISP pid=3336 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:28:51.115749 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 21:28:51.116713 systemd-logind[1338]: Session 27 logged out. Waiting for processes to exit. Oct 2 21:28:51.116854 systemd[1]: sshd@24-10.200.20.19:22-10.200.12.6:48828.service: Deactivated successfully. Oct 2 21:28:51.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.19:22-10.200.12.6:48828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:28:51.118435 systemd-logind[1338]: Removed session 27. Oct 2 21:28:51.704449 kubelet[2475]: E1002 21:28:51.704417 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:28:52.923624 kubelet[2475]: E1002 21:28:52.923597 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:28:57.925423 kubelet[2475]: E1002 21:28:57.925380 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:01.177215 systemd[1]: Started sshd@25-10.200.20.19:22-10.200.12.6:52450.service. Oct 2 21:29:01.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.19:22-10.200.12.6:52450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:01.182322 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 21:29:01.182421 kernel: audit: type=1130 audit(1696282141.176:1316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.19:22-10.200.12.6:52450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:01.614000 audit[3350]: USER_ACCT pid=3350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:01.616998 sshd[3350]: Accepted publickey for core from 10.200.12.6 port 52450 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:29:01.627107 sshd[3350]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:29:01.625000 audit[3350]: CRED_ACQ pid=3350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:01.669033 kernel: audit: type=1101 audit(1696282141.614:1317): pid=3350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:01.669226 kernel: audit: type=1103 audit(1696282141.625:1318): pid=3350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:01.683279 kernel: audit: type=1006 audit(1696282141.625:1319): pid=3350 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 21:29:01.625000 audit[3350]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec772550 a2=3 a3=1 items=0 ppid=1 pid=3350 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:01.711666 kernel: audit: type=1300 audit(1696282141.625:1319): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffec772550 a2=3 a3=1 items=0 ppid=1 pid=3350 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:01.625000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:01.725350 kernel: audit: type=1327 audit(1696282141.625:1319): proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:01.726151 systemd-logind[1338]: New session 28 of user core. Oct 2 21:29:01.726780 systemd[1]: Started session-28.scope. Oct 2 21:29:01.730000 audit[3350]: USER_START pid=3350 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:01.737000 audit[3352]: CRED_ACQ pid=3352 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:01.781213 kernel: audit: type=1105 audit(1696282141.730:1320): pid=3350 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:01.781355 kernel: audit: type=1103 audit(1696282141.737:1321): pid=3352 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:02.058336 sshd[3350]: pam_unix(sshd:session): session closed for user core Oct 2 21:29:02.059000 audit[3350]: USER_END pid=3350 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:02.062615 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 21:29:02.063445 systemd[1]: sshd@25-10.200.20.19:22-10.200.12.6:52450.service: Deactivated successfully. Oct 2 21:29:02.059000 audit[3350]: CRED_DISP pid=3350 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:02.110110 kernel: audit: type=1106 audit(1696282142.059:1322): pid=3350 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:02.110284 kernel: audit: type=1104 audit(1696282142.059:1323): pid=3350 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:02.110458 systemd-logind[1338]: Session 28 logged out. Waiting for processes to exit. Oct 2 21:29:02.062000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.19:22-10.200.12.6:52450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:02.111582 systemd-logind[1338]: Removed session 28. Oct 2 21:29:02.926115 kubelet[2475]: E1002 21:29:02.926070 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:04.704348 kubelet[2475]: E1002 21:29:04.704309 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:29:07.928201 kubelet[2475]: E1002 21:29:07.928173 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:12.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.19:22-10.200.12.6:42894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:12.131632 systemd[1]: Started sshd@26-10.200.20.19:22-10.200.12.6:42894.service. Oct 2 21:29:12.137778 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:29:12.137918 kernel: audit: type=1130 audit(1696282152.131:1325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.19:22-10.200.12.6:42894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:12.539000 audit[3362]: USER_ACCT pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:12.540323 sshd[3362]: Accepted publickey for core from 10.200.12.6 port 42894 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:29:12.568903 sshd[3362]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:29:12.569308 kernel: audit: type=1101 audit(1696282152.539:1326): pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:12.569368 kernel: audit: type=1103 audit(1696282152.568:1327): pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:12.568000 audit[3362]: CRED_ACQ pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:12.611883 kernel: audit: type=1006 audit(1696282152.568:1328): pid=3362 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 21:29:12.612047 kernel: audit: type=1300 audit(1696282152.568:1328): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6e19ed0 a2=3 a3=1 items=0 ppid=1 pid=3362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:12.568000 audit[3362]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6e19ed0 a2=3 a3=1 items=0 ppid=1 pid=3362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:12.568000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:12.658484 systemd[1]: Started session-29.scope. Oct 2 21:29:12.660133 systemd-logind[1338]: New session 29 of user core. Oct 2 21:29:12.664286 kernel: audit: type=1327 audit(1696282152.568:1328): proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:12.665000 audit[3362]: USER_START pid=3362 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:12.694000 audit[3364]: CRED_ACQ pid=3364 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:12.727202 kernel: audit: type=1105 audit(1696282152.665:1329): pid=3362 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:12.727476 kernel: audit: type=1103 audit(1696282152.694:1330): pid=3364 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:12.929974 kubelet[2475]: E1002 21:29:12.929945 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:13.015066 sshd[3362]: pam_unix(sshd:session): session closed for user core Oct 2 21:29:13.016000 audit[3362]: USER_END pid=3362 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:13.021000 audit[3362]: CRED_DISP pid=3362 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:13.050600 systemd[1]: sshd@26-10.200.20.19:22-10.200.12.6:42894.service: Deactivated successfully. Oct 2 21:29:13.051419 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 21:29:13.052952 systemd-logind[1338]: Session 29 logged out. Waiting for processes to exit. Oct 2 21:29:13.053946 systemd-logind[1338]: Removed session 29. Oct 2 21:29:13.072062 kernel: audit: type=1106 audit(1696282153.016:1331): pid=3362 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:13.072315 kernel: audit: type=1104 audit(1696282153.021:1332): pid=3362 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:13.050000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.19:22-10.200.12.6:42894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:17.931223 kubelet[2475]: E1002 21:29:17.931181 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:19.704318 kubelet[2475]: E1002 21:29:19.704284 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-6djhc_kube-system(4daf26a8-9c4d-49c0-8fa8-cfc59855696c)\"" pod="kube-system/cilium-6djhc" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c Oct 2 21:29:22.932942 kubelet[2475]: E1002 21:29:22.932907 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:23.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.19:22-10.200.12.6:41672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:23.082331 systemd[1]: Started sshd@27-10.200.20.19:22-10.200.12.6:41672.service. Oct 2 21:29:23.087611 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:29:23.087694 kernel: audit: type=1130 audit(1696282163.082:1334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.19:22-10.200.12.6:41672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:23.497000 audit[3375]: USER_ACCT pid=3375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:23.497937 sshd[3375]: Accepted publickey for core from 10.200.12.6 port 41672 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:29:23.536025 sshd[3375]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:29:23.536286 kernel: audit: type=1101 audit(1696282163.497:1335): pid=3375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:23.536334 kernel: audit: type=1103 audit(1696282163.535:1336): pid=3375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:23.535000 audit[3375]: CRED_ACQ pid=3375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:23.571992 kernel: audit: type=1006 audit(1696282163.535:1337): pid=3375 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 21:29:23.535000 audit[3375]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4325c90 a2=3 a3=1 items=0 ppid=1 pid=3375 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:23.577455 systemd-logind[1338]: New session 30 of user core. Oct 2 21:29:23.577983 systemd[1]: Started session-30.scope. Oct 2 21:29:23.595891 kernel: audit: type=1300 audit(1696282163.535:1337): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4325c90 a2=3 a3=1 items=0 ppid=1 pid=3375 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:23.535000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:23.606954 kernel: audit: type=1327 audit(1696282163.535:1337): proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:23.615695 kernel: audit: type=1105 audit(1696282163.607:1338): pid=3375 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:23.607000 audit[3375]: USER_START pid=3375 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:23.617000 audit[3377]: CRED_ACQ pid=3377 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:23.664874 kernel: audit: type=1103 audit(1696282163.617:1339): pid=3377 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:23.939068 sshd[3375]: pam_unix(sshd:session): session closed for user core Oct 2 21:29:23.939000 audit[3375]: USER_END pid=3375 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:23.942223 systemd-logind[1338]: Session 30 logged out. Waiting for processes to exit. Oct 2 21:29:23.944861 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 21:29:23.945971 systemd-logind[1338]: Removed session 30. Oct 2 21:29:23.946717 systemd[1]: sshd@27-10.200.20.19:22-10.200.12.6:41672.service: Deactivated successfully. Oct 2 21:29:23.940000 audit[3375]: CRED_DISP pid=3375 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:23.988870 kernel: audit: type=1106 audit(1696282163.939:1340): pid=3375 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:23.989001 kernel: audit: type=1104 audit(1696282163.940:1341): pid=3375 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:23.946000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.19:22-10.200.12.6:41672 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:24.009986 systemd[1]: Started sshd@28-10.200.20.19:22-10.200.12.6:41674.service. Oct 2 21:29:24.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.19:22-10.200.12.6:41674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:24.419000 audit[3387]: USER_ACCT pid=3387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:24.420442 sshd[3387]: Accepted publickey for core from 10.200.12.6 port 41674 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:29:24.422000 audit[3387]: CRED_ACQ pid=3387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:24.422000 audit[3387]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5f77280 a2=3 a3=1 items=0 ppid=1 pid=3387 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:24.422000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:24.423494 sshd[3387]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:29:24.428594 systemd[1]: Started session-31.scope. Oct 2 21:29:24.430026 systemd-logind[1338]: New session 31 of user core. Oct 2 21:29:24.434000 audit[3387]: USER_START pid=3387 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:24.437000 audit[3389]: CRED_ACQ pid=3389 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:26.458623 env[1353]: time="2023-10-02T21:29:26.458412670Z" level=info msg="StopPodSandbox for \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\"" Oct 2 21:29:26.458623 env[1353]: time="2023-10-02T21:29:26.458496430Z" level=info msg="Container to stop \"7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:29:26.460151 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465-shm.mount: Deactivated successfully. Oct 2 21:29:26.478063 systemd[1]: cri-containerd-dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465.scope: Deactivated successfully. Oct 2 21:29:26.478000 audit: BPF prog-id=121 op=UNLOAD Oct 2 21:29:26.483000 audit: BPF prog-id=124 op=UNLOAD Oct 2 21:29:26.486938 env[1353]: time="2023-10-02T21:29:26.486899405Z" level=info msg="StopContainer for \"fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2\" with timeout 30 (s)" Oct 2 21:29:26.487505 env[1353]: time="2023-10-02T21:29:26.487481883Z" level=info msg="Stop container \"fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2\" with signal terminated" Oct 2 21:29:26.509776 systemd[1]: cri-containerd-fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2.scope: Deactivated successfully. Oct 2 21:29:26.509000 audit: BPF prog-id=125 op=UNLOAD Oct 2 21:29:26.514000 audit: BPF prog-id=128 op=UNLOAD Oct 2 21:29:26.531838 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465-rootfs.mount: Deactivated successfully. Oct 2 21:29:26.554492 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2-rootfs.mount: Deactivated successfully. Oct 2 21:29:26.609049 env[1353]: time="2023-10-02T21:29:26.608985273Z" level=info msg="shim disconnected" id=fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2 Oct 2 21:29:26.609456 env[1353]: time="2023-10-02T21:29:26.609433832Z" level=warning msg="cleaning up after shim disconnected" id=fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2 namespace=k8s.io Oct 2 21:29:26.609589 env[1353]: time="2023-10-02T21:29:26.609570871Z" level=info msg="cleaning up dead shim" Oct 2 21:29:26.609949 env[1353]: time="2023-10-02T21:29:26.609919230Z" level=info msg="shim disconnected" id=dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465 Oct 2 21:29:26.610061 env[1353]: time="2023-10-02T21:29:26.610044669Z" level=warning msg="cleaning up after shim disconnected" id=dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465 namespace=k8s.io Oct 2 21:29:26.610150 env[1353]: time="2023-10-02T21:29:26.610136949Z" level=info msg="cleaning up dead shim" Oct 2 21:29:26.636513 env[1353]: time="2023-10-02T21:29:26.636465732Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:29:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3433 runtime=io.containerd.runc.v2\n" Oct 2 21:29:26.639575 env[1353]: time="2023-10-02T21:29:26.639541000Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:29:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3434 runtime=io.containerd.runc.v2\n" Oct 2 21:29:26.640013 env[1353]: time="2023-10-02T21:29:26.639986439Z" level=info msg="TearDown network for sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" successfully" Oct 2 21:29:26.640301 env[1353]: time="2023-10-02T21:29:26.640222598Z" level=info msg="StopPodSandbox for \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" returns successfully" Oct 2 21:29:26.640515 env[1353]: time="2023-10-02T21:29:26.640195998Z" level=info msg="StopContainer for \"fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2\" returns successfully" Oct 2 21:29:26.642795 env[1353]: time="2023-10-02T21:29:26.642373830Z" level=info msg="StopPodSandbox for \"ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4\"" Oct 2 21:29:26.643004 env[1353]: time="2023-10-02T21:29:26.642977668Z" level=info msg="Container to stop \"fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:29:26.644600 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4-shm.mount: Deactivated successfully. Oct 2 21:29:26.658000 audit: BPF prog-id=117 op=UNLOAD Oct 2 21:29:26.658421 systemd[1]: cri-containerd-ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4.scope: Deactivated successfully. Oct 2 21:29:26.662000 audit: BPF prog-id=120 op=UNLOAD Oct 2 21:29:26.685021 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4-rootfs.mount: Deactivated successfully. Oct 2 21:29:26.699379 env[1353]: time="2023-10-02T21:29:26.699195660Z" level=info msg="shim disconnected" id=ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4 Oct 2 21:29:26.699599 env[1353]: time="2023-10-02T21:29:26.699577098Z" level=warning msg="cleaning up after shim disconnected" id=ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4 namespace=k8s.io Oct 2 21:29:26.699663 env[1353]: time="2023-10-02T21:29:26.699651178Z" level=info msg="cleaning up dead shim" Oct 2 21:29:26.731046 env[1353]: time="2023-10-02T21:29:26.729965146Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:29:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3478 runtime=io.containerd.runc.v2\n" Oct 2 21:29:26.731548 env[1353]: time="2023-10-02T21:29:26.731517020Z" level=info msg="TearDown network for sandbox \"ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4\" successfully" Oct 2 21:29:26.731653 env[1353]: time="2023-10-02T21:29:26.731636900Z" level=info msg="StopPodSandbox for \"ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4\" returns successfully" Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.752818 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-etc-cni-netd\") pod \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.752864 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cilium-config-path\") pod \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.752894 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-lib-modules\") pod \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.752907 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "4daf26a8-9c4d-49c0-8fa8-cfc59855696c" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.752914 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-hubble-tls\") pod \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.752970 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-clustermesh-secrets\") pod \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.752990 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-xtables-lock\") pod \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.753008 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-bpf-maps\") pod \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.753026 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-host-proc-sys-net\") pod \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.753044 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cilium-cgroup\") pod \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.753062 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cni-path\") pod \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.753084 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-tqbkj\" (UniqueName: \"kubernetes.io/projected/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-kube-api-access-tqbkj\") pod \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.753100 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-hostproc\") pod \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.753117 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-host-proc-sys-kernel\") pod \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.753135 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cilium-run\") pod \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\" (UID: \"4daf26a8-9c4d-49c0-8fa8-cfc59855696c\") " Oct 2 21:29:26.753832 kubelet[2475]: I1002 21:29:26.753184 2475 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-etc-cni-netd\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:26.754959 kubelet[2475]: I1002 21:29:26.753207 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "4daf26a8-9c4d-49c0-8fa8-cfc59855696c" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:26.754959 kubelet[2475]: W1002 21:29:26.753732 2475 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/4daf26a8-9c4d-49c0-8fa8-cfc59855696c/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 21:29:26.755392 kubelet[2475]: I1002 21:29:26.755354 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "4daf26a8-9c4d-49c0-8fa8-cfc59855696c" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:26.755465 kubelet[2475]: I1002 21:29:26.755400 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "4daf26a8-9c4d-49c0-8fa8-cfc59855696c" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:26.755465 kubelet[2475]: I1002 21:29:26.755417 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "4daf26a8-9c4d-49c0-8fa8-cfc59855696c" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:26.755465 kubelet[2475]: I1002 21:29:26.755432 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "4daf26a8-9c4d-49c0-8fa8-cfc59855696c" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:26.755465 kubelet[2475]: I1002 21:29:26.755448 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cni-path" (OuterVolumeSpecName: "cni-path") pod "4daf26a8-9c4d-49c0-8fa8-cfc59855696c" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:26.755675 kubelet[2475]: I1002 21:29:26.755656 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "4daf26a8-9c4d-49c0-8fa8-cfc59855696c" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:26.755848 kubelet[2475]: I1002 21:29:26.755828 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "4daf26a8-9c4d-49c0-8fa8-cfc59855696c" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 21:29:26.755969 kubelet[2475]: I1002 21:29:26.755955 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-hostproc" (OuterVolumeSpecName: "hostproc") pod "4daf26a8-9c4d-49c0-8fa8-cfc59855696c" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:26.756086 kubelet[2475]: I1002 21:29:26.756057 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "4daf26a8-9c4d-49c0-8fa8-cfc59855696c" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:29:26.760307 kubelet[2475]: I1002 21:29:26.760278 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "4daf26a8-9c4d-49c0-8fa8-cfc59855696c" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:29:26.760878 kubelet[2475]: I1002 21:29:26.760843 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "4daf26a8-9c4d-49c0-8fa8-cfc59855696c" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 21:29:26.764006 kubelet[2475]: I1002 21:29:26.763980 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-kube-api-access-tqbkj" (OuterVolumeSpecName: "kube-api-access-tqbkj") pod "4daf26a8-9c4d-49c0-8fa8-cfc59855696c" (UID: "4daf26a8-9c4d-49c0-8fa8-cfc59855696c"). InnerVolumeSpecName "kube-api-access-tqbkj". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:29:26.854339 kubelet[2475]: I1002 21:29:26.854310 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-wrrcg\" (UniqueName: \"kubernetes.io/projected/4fc7b856-9289-41d5-bd09-f9041bca7787-kube-api-access-wrrcg\") pod \"4fc7b856-9289-41d5-bd09-f9041bca7787\" (UID: \"4fc7b856-9289-41d5-bd09-f9041bca7787\") " Oct 2 21:29:26.854537 kubelet[2475]: I1002 21:29:26.854526 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4fc7b856-9289-41d5-bd09-f9041bca7787-cilium-config-path\") pod \"4fc7b856-9289-41d5-bd09-f9041bca7787\" (UID: \"4fc7b856-9289-41d5-bd09-f9041bca7787\") " Oct 2 21:29:26.854667 kubelet[2475]: I1002 21:29:26.854656 2475 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-bpf-maps\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:26.854753 kubelet[2475]: I1002 21:29:26.854744 2475 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-host-proc-sys-net\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:26.854829 kubelet[2475]: I1002 21:29:26.854819 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cilium-cgroup\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:26.854898 kubelet[2475]: I1002 21:29:26.854890 2475 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cni-path\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:26.854972 kubelet[2475]: I1002 21:29:26.854963 2475 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-tqbkj\" (UniqueName: \"kubernetes.io/projected/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-kube-api-access-tqbkj\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:26.855048 kubelet[2475]: I1002 21:29:26.855038 2475 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-hostproc\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:26.855125 kubelet[2475]: I1002 21:29:26.855110 2475 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:26.855187 kubelet[2475]: I1002 21:29:26.855178 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cilium-run\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:26.855288 kubelet[2475]: I1002 21:29:26.855277 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-cilium-config-path\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:26.855390 kubelet[2475]: I1002 21:29:26.855377 2475 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-hubble-tls\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:26.855499 kubelet[2475]: I1002 21:29:26.855489 2475 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-lib-modules\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:26.855644 kubelet[2475]: I1002 21:29:26.855588 2475 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-clustermesh-secrets\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:26.855752 kubelet[2475]: I1002 21:29:26.855741 2475 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4daf26a8-9c4d-49c0-8fa8-cfc59855696c-xtables-lock\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:26.855856 kubelet[2475]: W1002 21:29:26.855180 2475 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/4fc7b856-9289-41d5-bd09-f9041bca7787/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 21:29:26.858024 kubelet[2475]: I1002 21:29:26.857984 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/4fc7b856-9289-41d5-bd09-f9041bca7787-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "4fc7b856-9289-41d5-bd09-f9041bca7787" (UID: "4fc7b856-9289-41d5-bd09-f9041bca7787"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 21:29:26.858990 kubelet[2475]: I1002 21:29:26.858961 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/4fc7b856-9289-41d5-bd09-f9041bca7787-kube-api-access-wrrcg" (OuterVolumeSpecName: "kube-api-access-wrrcg") pod "4fc7b856-9289-41d5-bd09-f9041bca7787" (UID: "4fc7b856-9289-41d5-bd09-f9041bca7787"). InnerVolumeSpecName "kube-api-access-wrrcg". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:29:26.956356 kubelet[2475]: I1002 21:29:26.956318 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4fc7b856-9289-41d5-bd09-f9041bca7787-cilium-config-path\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:26.956356 kubelet[2475]: I1002 21:29:26.956353 2475 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-wrrcg\" (UniqueName: \"kubernetes.io/projected/4fc7b856-9289-41d5-bd09-f9041bca7787-kube-api-access-wrrcg\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:29:27.453008 kubelet[2475]: I1002 21:29:27.452929 2475 scope.go:115] "RemoveContainer" containerID="fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2" Oct 2 21:29:27.455579 env[1353]: time="2023-10-02T21:29:27.455302131Z" level=info msg="RemoveContainer for \"fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2\"" Oct 2 21:29:27.460197 systemd[1]: var-lib-kubelet-pods-4daf26a8\x2d9c4d\x2d49c0\x2d8fa8\x2dcfc59855696c-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 21:29:27.460365 systemd[1]: var-lib-kubelet-pods-4daf26a8\x2d9c4d\x2d49c0\x2d8fa8\x2dcfc59855696c-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 21:29:27.460442 systemd[1]: var-lib-kubelet-pods-4fc7b856\x2d9289\x2d41d5\x2dbd09\x2df9041bca7787-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dwrrcg.mount: Deactivated successfully. Oct 2 21:29:27.460507 systemd[1]: var-lib-kubelet-pods-4daf26a8\x2d9c4d\x2d49c0\x2d8fa8\x2dcfc59855696c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dtqbkj.mount: Deactivated successfully. Oct 2 21:29:27.461914 systemd[1]: Removed slice kubepods-besteffort-pod4fc7b856_9289_41d5_bd09_f9041bca7787.slice. Oct 2 21:29:27.465057 systemd[1]: Removed slice kubepods-burstable-pod4daf26a8_9c4d_49c0_8fa8_cfc59855696c.slice. Oct 2 21:29:27.468261 env[1353]: time="2023-10-02T21:29:27.468138043Z" level=info msg="RemoveContainer for \"fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2\" returns successfully" Oct 2 21:29:27.468545 kubelet[2475]: I1002 21:29:27.468359 2475 scope.go:115] "RemoveContainer" containerID="fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2" Oct 2 21:29:27.470624 env[1353]: time="2023-10-02T21:29:27.468577881Z" level=error msg="ContainerStatus for \"fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2\": not found" Oct 2 21:29:27.470750 kubelet[2475]: E1002 21:29:27.468795 2475 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2\": not found" containerID="fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2" Oct 2 21:29:27.470750 kubelet[2475]: I1002 21:29:27.468830 2475 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2} err="failed to get container status \"fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2\": rpc error: code = NotFound desc = an error occurred when try to find container \"fd416742784f160bd80ef904a02c117783e3ea8f73769f078c2503f6c1c2eac2\": not found" Oct 2 21:29:27.470750 kubelet[2475]: I1002 21:29:27.468842 2475 scope.go:115] "RemoveContainer" containerID="7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744" Oct 2 21:29:27.472258 env[1353]: time="2023-10-02T21:29:27.471997069Z" level=info msg="RemoveContainer for \"7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744\"" Oct 2 21:29:27.478662 env[1353]: time="2023-10-02T21:29:27.478553124Z" level=info msg="RemoveContainer for \"7537404cfa5dd4f5521fe4d318292a57002122b99011ce79d3bdb4e4c6537744\" returns successfully" Oct 2 21:29:27.707044 kubelet[2475]: I1002 21:29:27.706922 2475 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=4daf26a8-9c4d-49c0-8fa8-cfc59855696c path="/var/lib/kubelet/pods/4daf26a8-9c4d-49c0-8fa8-cfc59855696c/volumes" Oct 2 21:29:27.708494 kubelet[2475]: I1002 21:29:27.708453 2475 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=4fc7b856-9289-41d5-bd09-f9041bca7787 path="/var/lib/kubelet/pods/4fc7b856-9289-41d5-bd09-f9041bca7787/volumes" Oct 2 21:29:27.935061 kubelet[2475]: E1002 21:29:27.935033 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:28.470444 sshd[3387]: pam_unix(sshd:session): session closed for user core Oct 2 21:29:28.472000 audit[3387]: USER_END pid=3387 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:28.474398 systemd[1]: sshd@28-10.200.20.19:22-10.200.12.6:41674.service: Deactivated successfully. Oct 2 21:29:28.475269 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 21:29:28.475456 systemd[1]: session-31.scope: Consumed 1.178s CPU time. Oct 2 21:29:28.479635 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 21:29:28.479722 kernel: audit: type=1106 audit(1696282168.472:1355): pid=3387 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:28.480694 systemd-logind[1338]: Session 31 logged out. Waiting for processes to exit. Oct 2 21:29:28.481954 systemd-logind[1338]: Removed session 31. Oct 2 21:29:28.472000 audit[3387]: CRED_DISP pid=3387 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:28.544095 kernel: audit: type=1104 audit(1696282168.472:1356): pid=3387 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:28.544249 kernel: audit: type=1131 audit(1696282168.474:1357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.19:22-10.200.12.6:41674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:28.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.19:22-10.200.12.6:41674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:28.537964 systemd[1]: Started sshd@29-10.200.20.19:22-10.200.12.6:34034.service. Oct 2 21:29:28.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.19:22-10.200.12.6:34034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:28.583022 kernel: audit: type=1130 audit(1696282168.537:1358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.19:22-10.200.12.6:34034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:29:28.947000 audit[3497]: USER_ACCT pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:28.947869 sshd[3497]: Accepted publickey for core from 10.200.12.6 port 34034 ssh2: RSA SHA256:zg1VrqhmImE3BaI+fbTiUcq614JEgYsSj/LI2jD6nL0 Oct 2 21:29:28.971329 kernel: audit: type=1101 audit(1696282168.947:1359): pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:28.974057 sshd[3497]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:29:28.973000 audit[3497]: CRED_ACQ pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:29.003444 systemd[1]: Started session-32.scope. Oct 2 21:29:29.004377 systemd-logind[1338]: New session 32 of user core. Oct 2 21:29:29.015096 kernel: audit: type=1103 audit(1696282168.973:1360): pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:29.015318 kernel: audit: type=1006 audit(1696282168.973:1361): pid=3497 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Oct 2 21:29:28.973000 audit[3497]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8a50030 a2=3 a3=1 items=0 ppid=1 pid=3497 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:29.049519 kernel: audit: type=1300 audit(1696282168.973:1361): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8a50030 a2=3 a3=1 items=0 ppid=1 pid=3497 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:28.973000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:29.058139 kernel: audit: type=1327 audit(1696282168.973:1361): proctitle=737368643A20636F7265205B707269765D Oct 2 21:29:29.058246 kernel: audit: type=1105 audit(1696282169.016:1362): pid=3497 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:29.016000 audit[3497]: USER_START pid=3497 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:29.023000 audit[3499]: CRED_ACQ pid=3499 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:29:30.386059 kubelet[2475]: I1002 21:29:30.386024 2475 topology_manager.go:212] "Topology Admit Handler" Oct 2 21:29:30.386501 kubelet[2475]: E1002 21:29:30.386485 2475 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="4daf26a8-9c4d-49c0-8fa8-cfc59855696c" containerName="mount-cgroup" Oct 2 21:29:30.386572 kubelet[2475]: E1002 21:29:30.386563 2475 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="4daf26a8-9c4d-49c0-8fa8-cfc59855696c" containerName="mount-cgroup" Oct 2 21:29:30.386628 kubelet[2475]: E1002 21:29:30.386619 2475 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="4daf26a8-9c4d-49c0-8fa8-cfc59855696c" containerName="mount-cgroup" Oct 2 21:29:30.386692 kubelet[2475]: E1002 21:29:30.386683 2475 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="4fc7b856-9289-41d5-bd09-f9041bca7787" containerName="cilium-operator" Oct 2 21:29:30.386748 kubelet[2475]: E1002 21:29:30.386739 2475 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="4daf26a8-9c4d-49c0-8fa8-cfc59855696c" containerName="mount-cgroup" Oct 2 21:29:30.386826 kubelet[2475]: I1002 21:29:30.386816 2475 memory_manager.go:346] "RemoveStaleState removing state" podUID="4daf26a8-9c4d-49c0-8fa8-cfc59855696c" containerName="mount-cgroup" Oct 2 21:29:30.386879 kubelet[2475]: I1002 21:29:30.386870 2475 memory_manager.go:346] "RemoveStaleState removing state" podUID="4daf26a8-9c4d-49c0-8fa8-cfc59855696c" containerName="mount-cgroup" Oct 2 21:29:30.386936 kubelet[2475]: I1002 21:29:30.386928 2475 memory_manager.go:346] "RemoveStaleState removing state" podUID="4daf26a8-9c4d-49c0-8fa8-cfc59855696c" containerName="mount-cgroup" Oct 2 21:29:30.386990 kubelet[2475]: I1002 21:29:30.386981 2475 memory_manager.go:346] "RemoveStaleState removing state" podUID="4daf26a8-9c4d-49c0-8fa8-cfc59855696c" containerName="mount-cgroup" Oct 2 21:29:30.387049 kubelet[2475]: I1002 21:29:30.387039 2475 memory_manager.go:346] "RemoveStaleState removing state" podUID="4daf26a8-9c4d-49c0-8fa8-cfc59855696c" containerName="mount-cgroup" Oct 2 21:29:30.387105 kubelet[2475]: I1002 21:29:30.387097 2475 memory_manager.go:346] "RemoveStaleState removing state" podUID="4fc7b856-9289-41d5-bd09-f9041bca7787" containerName="cilium-operator" Oct 2 21:29:30.387176 kubelet[2475]: E1002 21:29:30.387165 2475 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="4daf26a8-9c4d-49c0-8fa8-cfc59855696c" containerName="mount-cgroup" Oct 2 21:29:30.387246 kubelet[2475]: E1002 21:29:30.387221 2475 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="4daf26a8-9c4d-49c0-8fa8-cfc59855696c" containerName="mount-cgroup" Oct 2 21:29:30.387332 kubelet[2475]: I1002 21:29:30.387320 2475 memory_manager.go:346] "RemoveStaleState removing state" podUID="4daf26a8-9c4d-49c0-8fa8-cfc59855696c" containerName="mount-cgroup" Oct 2 21:29:30.392007 systemd[1]: Created slice kubepods-burstable-pod85b7d022_8d62_4b69_a0c9_ecdbd6f1e0aa.slice. Oct 2 21:29:30.474578 kubelet[2475]: I1002 21:29:30.474548 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-ipsec-secrets\") pod \"cilium-q6n5j\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " pod="kube-system/cilium-q6n5j" Oct 2 21:29:30.474810 kubelet[2475]: I1002 21:29:30.474797 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-smn22\" (UniqueName: \"kubernetes.io/projected/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-kube-api-access-smn22\") pod \"cilium-q6n5j\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " pod="kube-system/cilium-q6n5j" Oct 2 21:29:30.474897 kubelet[2475]: I1002 21:29:30.474887 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-xtables-lock\") pod \"cilium-q6n5j\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " pod="kube-system/cilium-q6n5j" Oct 2 21:29:30.474977 kubelet[2475]: I1002 21:29:30.474968 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cni-path\") pod \"cilium-q6n5j\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " pod="kube-system/cilium-q6n5j" Oct 2 21:29:30.475066 kubelet[2475]: I1002 21:29:30.475056 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-clustermesh-secrets\") pod \"cilium-q6n5j\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " pod="kube-system/cilium-q6n5j" Oct 2 21:29:30.475138 kubelet[2475]: I1002 21:29:30.475129 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-hubble-tls\") pod \"cilium-q6n5j\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " pod="kube-system/cilium-q6n5j" Oct 2 21:29:30.475211 kubelet[2475]: I1002 21:29:30.475202 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-run\") pod \"cilium-q6n5j\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " pod="kube-system/cilium-q6n5j" Oct 2 21:29:30.475307 kubelet[2475]: I1002 21:29:30.475296 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-lib-modules\") pod \"cilium-q6n5j\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " pod="kube-system/cilium-q6n5j" Oct 2 21:29:30.475394 kubelet[2475]: I1002 21:29:30.475384 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-host-proc-sys-kernel\") pod \"cilium-q6n5j\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " pod="kube-system/cilium-q6n5j" Oct 2 21:29:30.475478 kubelet[2475]: I1002 21:29:30.475469 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-bpf-maps\") pod \"cilium-q6n5j\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " pod="kube-system/cilium-q6n5j" Oct 2 21:29:30.475553 kubelet[2475]: I1002 21:29:30.475544 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-hostproc\") pod \"cilium-q6n5j\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " pod="kube-system/cilium-q6n5j" Oct 2 21:29:30.475627 kubelet[2475]: I1002 21:29:30.475618 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-etc-cni-netd\") pod \"cilium-q6n5j\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " pod="kube-system/cilium-q6n5j" Oct 2 21:29:30.475709 kubelet[2475]: I1002 21:29:30.475697 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-config-path\") pod \"cilium-q6n5j\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " pod="kube-system/cilium-q6n5j" Oct 2 21:29:30.475791 kubelet[2475]: I1002 21:29:30.475781 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-cgroup\") pod \"cilium-q6n5j\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " pod="kube-system/cilium-q6n5j" Oct 2 21:29:30.475872 kubelet[2475]: I1002 21:29:30.475862 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-host-proc-sys-net\") pod \"cilium-q6n5j\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " pod="kube-system/cilium-q6n5j" Oct 2 21:29:30.696263 env[1353]: time="2023-10-02T21:29:30.695921495Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-q6n5j,Uid:85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa,Namespace:kube-system,Attempt:0,}" Oct 2 21:29:30.762987 env[1353]: time="2023-10-02T21:29:30.762894521Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:29:30.762987 env[1353]: time="2023-10-02T21:29:30.762938801Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:29:30.762987 env[1353]: time="2023-10-02T21:29:30.762950240Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:29:30.763409 env[1353]: time="2023-10-02T21:29:30.763343319Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5 pid=3518 runtime=io.containerd.runc.v2 Oct 2 21:29:30.777564 systemd[1]: Started cri-containerd-c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5.scope. Oct 2 21:29:30.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.798000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.799000 audit: BPF prog-id=129 op=LOAD Oct 2 21:29:30.800000 audit[3527]: AVC avc: denied { bpf } for pid=3527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.800000 audit[3527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3518 pid=3527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:30.800000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337623739313835623034323165623664363334613765663930623135 Oct 2 21:29:30.800000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.800000 audit[3527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3518 pid=3527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:30.800000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337623739313835623034323165623664363334613765663930623135 Oct 2 21:29:30.800000 audit[3527]: AVC avc: denied { bpf } for pid=3527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.800000 audit[3527]: AVC avc: denied { bpf } for pid=3527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.800000 audit[3527]: AVC avc: denied { bpf } for pid=3527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.800000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.800000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.800000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.800000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.800000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.800000 audit[3527]: AVC avc: denied { bpf } for pid=3527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.800000 audit[3527]: AVC avc: denied { bpf } for pid=3527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.800000 audit: BPF prog-id=130 op=LOAD Oct 2 21:29:30.800000 audit[3527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3518 pid=3527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:30.800000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337623739313835623034323165623664363334613765663930623135 Oct 2 21:29:30.801000 audit[3527]: AVC avc: denied { bpf } for pid=3527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.801000 audit[3527]: AVC avc: denied { bpf } for pid=3527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.801000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.801000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.801000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.801000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.801000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.801000 audit[3527]: AVC avc: denied { bpf } for pid=3527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.801000 audit[3527]: AVC avc: denied { bpf } for pid=3527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.801000 audit: BPF prog-id=131 op=LOAD Oct 2 21:29:30.801000 audit[3527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3518 pid=3527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:30.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337623739313835623034323165623664363334613765663930623135 Oct 2 21:29:30.802000 audit: BPF prog-id=131 op=UNLOAD Oct 2 21:29:30.802000 audit: BPF prog-id=130 op=UNLOAD Oct 2 21:29:30.802000 audit[3527]: AVC avc: denied { bpf } for pid=3527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.802000 audit[3527]: AVC avc: denied { bpf } for pid=3527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.802000 audit[3527]: AVC avc: denied { bpf } for pid=3527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.802000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.802000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.802000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.802000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.802000 audit[3527]: AVC avc: denied { perfmon } for pid=3527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.802000 audit[3527]: AVC avc: denied { bpf } for pid=3527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.802000 audit[3527]: AVC avc: denied { bpf } for pid=3527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:29:30.802000 audit: BPF prog-id=132 op=LOAD Oct 2 21:29:30.802000 audit[3527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3518 pid=3527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:29:30.802000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337623739313835623034323165623664363334613765663930623135 Oct 2 21:29:30.826891 env[1353]: time="2023-10-02T21:29:30.826816118Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-q6n5j,Uid:85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa,Namespace:kube-system,Attempt:0,} returns sandbox id \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\"" Oct 2 21:29:30.831007 env[1353]: time="2023-10-02T21:29:30.830736543Z" level=info msg="CreateContainer within sandbox \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 21:29:30.865280 env[1353]: time="2023-10-02T21:29:30.865204892Z" level=info msg="CreateContainer within sandbox \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423\"" Oct 2 21:29:30.866732 env[1353]: time="2023-10-02T21:29:30.865867010Z" level=info msg="StartContainer for \"e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423\"" Oct 2 21:29:30.890254 systemd[1]: Started cri-containerd-e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423.scope. Oct 2 21:29:30.908568 systemd[1]: cri-containerd-e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423.scope: Deactivated successfully. Oct 2 21:29:31.002325 env[1353]: time="2023-10-02T21:29:31.002185332Z" level=info msg="shim disconnected" id=e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423 Oct 2 21:29:31.002633 env[1353]: time="2023-10-02T21:29:31.002611810Z" level=warning msg="cleaning up after shim disconnected" id=e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423 namespace=k8s.io Oct 2 21:29:31.002701 env[1353]: time="2023-10-02T21:29:31.002687930Z" level=info msg="cleaning up dead shim" Oct 2 21:29:31.035857 env[1353]: time="2023-10-02T21:29:31.035804643Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:29:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3577 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:29:31Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:29:31.036484 env[1353]: time="2023-10-02T21:29:31.036338401Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 21:29:31.036706 env[1353]: time="2023-10-02T21:29:31.036660680Z" level=error msg="Failed to pipe stdout of container \"e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423\"" error="reading from a closed fifo" Oct 2 21:29:31.036798 env[1353]: time="2023-10-02T21:29:31.036680680Z" level=error msg="Failed to pipe stderr of container \"e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423\"" error="reading from a closed fifo" Oct 2 21:29:31.040062 env[1353]: time="2023-10-02T21:29:31.040003507Z" level=error msg="StartContainer for \"e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:29:31.040672 kubelet[2475]: E1002 21:29:31.040307 2475 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423" Oct 2 21:29:31.040672 kubelet[2475]: E1002 21:29:31.040411 2475 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:29:31.040672 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:29:31.040672 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 21:29:31.040672 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-smn22,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-q6n5j_kube-system(85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:29:31.040672 kubelet[2475]: E1002 21:29:31.040449 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-q6n5j" podUID=85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa Oct 2 21:29:31.470268 env[1353]: time="2023-10-02T21:29:31.469344656Z" level=info msg="CreateContainer within sandbox \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 21:29:31.494797 env[1353]: time="2023-10-02T21:29:31.494745515Z" level=info msg="CreateContainer within sandbox \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1\"" Oct 2 21:29:31.495803 env[1353]: time="2023-10-02T21:29:31.495746546Z" level=info msg="StartContainer for \"ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1\"" Oct 2 21:29:31.522129 systemd[1]: Started cri-containerd-ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1.scope. Oct 2 21:29:31.547056 systemd[1]: cri-containerd-ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1.scope: Deactivated successfully. Oct 2 21:29:31.561329 env[1353]: time="2023-10-02T21:29:31.561275136Z" level=info msg="shim disconnected" id=ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1 Oct 2 21:29:31.561553 env[1353]: time="2023-10-02T21:29:31.561536334Z" level=warning msg="cleaning up after shim disconnected" id=ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1 namespace=k8s.io Oct 2 21:29:31.561616 env[1353]: time="2023-10-02T21:29:31.561603013Z" level=info msg="cleaning up dead shim" Oct 2 21:29:31.574837 env[1353]: time="2023-10-02T21:29:31.574787858Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:29:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3616 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:29:31Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:29:31.575309 env[1353]: time="2023-10-02T21:29:31.575254374Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 21:29:31.578311 env[1353]: time="2023-10-02T21:29:31.578265468Z" level=error msg="Failed to pipe stdout of container \"ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1\"" error="reading from a closed fifo" Oct 2 21:29:31.578408 env[1353]: time="2023-10-02T21:29:31.578335267Z" level=error msg="Failed to pipe stderr of container \"ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1\"" error="reading from a closed fifo" Oct 2 21:29:31.581787 env[1353]: time="2023-10-02T21:29:31.581744318Z" level=error msg="StartContainer for \"ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:29:31.585687 kubelet[2475]: E1002 21:29:31.585585 2475 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1" Oct 2 21:29:31.585687 kubelet[2475]: E1002 21:29:31.585684 2475 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:29:31.585687 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:29:31.585687 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 21:29:31.585687 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-smn22,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-q6n5j_kube-system(85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:29:31.587486 kubelet[2475]: E1002 21:29:31.585730 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-q6n5j" podUID=85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa Oct 2 21:29:32.470264 kubelet[2475]: I1002 21:29:32.469816 2475 scope.go:115] "RemoveContainer" containerID="e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423" Oct 2 21:29:32.470264 kubelet[2475]: I1002 21:29:32.470170 2475 scope.go:115] "RemoveContainer" containerID="e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423" Oct 2 21:29:32.472776 env[1353]: time="2023-10-02T21:29:32.472713790Z" level=info msg="RemoveContainer for \"e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423\"" Oct 2 21:29:32.473369 env[1353]: time="2023-10-02T21:29:32.473342599Z" level=info msg="RemoveContainer for \"e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423\"" Oct 2 21:29:32.473467 env[1353]: time="2023-10-02T21:29:32.473432795Z" level=error msg="RemoveContainer for \"e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423\" failed" error="failed to set removing state for container \"e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423\": container is already in removing state" Oct 2 21:29:32.473619 kubelet[2475]: E1002 21:29:32.473602 2475 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423\": container is already in removing state" containerID="e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423" Oct 2 21:29:32.473726 kubelet[2475]: E1002 21:29:32.473715 2475 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423": container is already in removing state; Skipping pod "cilium-q6n5j_kube-system(85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa)" Oct 2 21:29:32.474121 kubelet[2475]: E1002 21:29:32.474103 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-q6n5j_kube-system(85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa)\"" pod="kube-system/cilium-q6n5j" podUID=85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa Oct 2 21:29:32.479292 env[1353]: time="2023-10-02T21:29:32.479250348Z" level=info msg="RemoveContainer for \"e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423\" returns successfully" Oct 2 21:29:32.767000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:32.767000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40020019b0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:29:32.767000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:32.769000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:32.769000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d79cc0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:29:32.769000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:32.936637 kubelet[2475]: E1002 21:29:32.936589 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:33.128000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:33.128000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400c31b3b0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:29:33.128000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:29:33.129000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:33.129000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400f15bc20 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:29:33.129000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:29:33.183000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:33.183000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400f15bc60 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:29:33.183000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:29:33.184000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:33.184000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:33.184000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c31b410 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:29:33.184000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:29:33.184000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:33.184000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c31b440 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:29:33.184000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:29:33.184000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400c494990 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:29:33.184000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:29:34.107710 kubelet[2475]: W1002 21:29:34.107665 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod85b7d022_8d62_4b69_a0c9_ecdbd6f1e0aa.slice/cri-containerd-e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423.scope WatchSource:0}: container "e6d125e04ef672f33cbd94afbbe60bfc1b9f320a97ea87edcddeb2fc903c8423" in namespace "k8s.io": not found Oct 2 21:29:37.214773 kubelet[2475]: W1002 21:29:37.214713 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod85b7d022_8d62_4b69_a0c9_ecdbd6f1e0aa.slice/cri-containerd-ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1.scope WatchSource:0}: task ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1 not found: not found Oct 2 21:29:37.634917 env[1353]: time="2023-10-02T21:29:37.634800803Z" level=info msg="StopPodSandbox for \"ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4\"" Oct 2 21:29:37.635263 env[1353]: time="2023-10-02T21:29:37.634892799Z" level=info msg="TearDown network for sandbox \"ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4\" successfully" Oct 2 21:29:37.635263 env[1353]: time="2023-10-02T21:29:37.634939037Z" level=info msg="StopPodSandbox for \"ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4\" returns successfully" Oct 2 21:29:37.637061 env[1353]: time="2023-10-02T21:29:37.635794756Z" level=info msg="RemovePodSandbox for \"ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4\"" Oct 2 21:29:37.637061 env[1353]: time="2023-10-02T21:29:37.635845434Z" level=info msg="Forcibly stopping sandbox \"ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4\"" Oct 2 21:29:37.637061 env[1353]: time="2023-10-02T21:29:37.635938189Z" level=info msg="TearDown network for sandbox \"ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4\" successfully" Oct 2 21:29:37.643874 env[1353]: time="2023-10-02T21:29:37.643731017Z" level=info msg="RemovePodSandbox \"ecee26e2d464d35f1e02c9b182610c75a5528203d6fc7fbb9f2a0c7e2ff399e4\" returns successfully" Oct 2 21:29:37.644556 env[1353]: time="2023-10-02T21:29:37.644363907Z" level=info msg="StopPodSandbox for \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\"" Oct 2 21:29:37.644556 env[1353]: time="2023-10-02T21:29:37.644440424Z" level=info msg="TearDown network for sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" successfully" Oct 2 21:29:37.644556 env[1353]: time="2023-10-02T21:29:37.644486621Z" level=info msg="StopPodSandbox for \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" returns successfully" Oct 2 21:29:37.645933 env[1353]: time="2023-10-02T21:29:37.644925720Z" level=info msg="RemovePodSandbox for \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\"" Oct 2 21:29:37.645933 env[1353]: time="2023-10-02T21:29:37.644954999Z" level=info msg="Forcibly stopping sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\"" Oct 2 21:29:37.645933 env[1353]: time="2023-10-02T21:29:37.645024836Z" level=info msg="TearDown network for sandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" successfully" Oct 2 21:29:37.650354 env[1353]: time="2023-10-02T21:29:37.650322903Z" level=info msg="RemovePodSandbox \"dc378907f283ef0a8a8dbd7d79f5025d3d53d4e3bcc6eebb4fc2e162bc1da465\" returns successfully" Oct 2 21:29:37.937861 kubelet[2475]: E1002 21:29:37.937819 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:42.708574 env[1353]: time="2023-10-02T21:29:42.708416337Z" level=info msg="CreateContainer within sandbox \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 21:29:42.734397 env[1353]: time="2023-10-02T21:29:42.734327458Z" level=info msg="CreateContainer within sandbox \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27\"" Oct 2 21:29:42.735266 env[1353]: time="2023-10-02T21:29:42.734961909Z" level=info msg="StartContainer for \"5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27\"" Oct 2 21:29:42.765352 systemd[1]: Started cri-containerd-5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27.scope. Oct 2 21:29:42.786297 systemd[1]: cri-containerd-5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27.scope: Deactivated successfully. Oct 2 21:29:42.817401 env[1353]: time="2023-10-02T21:29:42.817327498Z" level=info msg="shim disconnected" id=5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27 Oct 2 21:29:42.817401 env[1353]: time="2023-10-02T21:29:42.817392775Z" level=warning msg="cleaning up after shim disconnected" id=5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27 namespace=k8s.io Oct 2 21:29:42.817401 env[1353]: time="2023-10-02T21:29:42.817404615Z" level=info msg="cleaning up dead shim" Oct 2 21:29:42.838208 env[1353]: time="2023-10-02T21:29:42.838143735Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:29:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3657 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:29:42Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:29:42.838511 env[1353]: time="2023-10-02T21:29:42.838441601Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 21:29:42.838723 env[1353]: time="2023-10-02T21:29:42.838690190Z" level=error msg="Failed to pipe stderr of container \"5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27\"" error="reading from a closed fifo" Oct 2 21:29:42.838816 env[1353]: time="2023-10-02T21:29:42.838694470Z" level=error msg="Failed to pipe stdout of container \"5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27\"" error="reading from a closed fifo" Oct 2 21:29:42.843518 env[1353]: time="2023-10-02T21:29:42.843467009Z" level=error msg="StartContainer for \"5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:29:42.844258 kubelet[2475]: E1002 21:29:42.843767 2475 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27" Oct 2 21:29:42.844258 kubelet[2475]: E1002 21:29:42.843898 2475 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:29:42.844258 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:29:42.844258 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 21:29:42.844258 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-smn22,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-q6n5j_kube-system(85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:29:42.844258 kubelet[2475]: E1002 21:29:42.843933 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-q6n5j" podUID=85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa Oct 2 21:29:42.938516 kubelet[2475]: E1002 21:29:42.938467 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:43.491153 kubelet[2475]: I1002 21:29:43.491036 2475 scope.go:115] "RemoveContainer" containerID="ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1" Oct 2 21:29:43.491846 kubelet[2475]: I1002 21:29:43.491788 2475 scope.go:115] "RemoveContainer" containerID="ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1" Oct 2 21:29:43.492761 env[1353]: time="2023-10-02T21:29:43.492716672Z" level=info msg="RemoveContainer for \"ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1\"" Oct 2 21:29:43.493665 env[1353]: time="2023-10-02T21:29:43.493637829Z" level=info msg="RemoveContainer for \"ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1\"" Oct 2 21:29:43.493875 env[1353]: time="2023-10-02T21:29:43.493836820Z" level=error msg="RemoveContainer for \"ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1\" failed" error="failed to set removing state for container \"ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1\": container is already in removing state" Oct 2 21:29:43.494160 kubelet[2475]: E1002 21:29:43.494132 2475 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1\": container is already in removing state" containerID="ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1" Oct 2 21:29:43.494416 kubelet[2475]: E1002 21:29:43.494359 2475 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1": container is already in removing state; Skipping pod "cilium-q6n5j_kube-system(85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa)" Oct 2 21:29:43.496100 kubelet[2475]: E1002 21:29:43.496065 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-q6n5j_kube-system(85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa)\"" pod="kube-system/cilium-q6n5j" podUID=85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa Oct 2 21:29:43.509458 env[1353]: time="2023-10-02T21:29:43.509400184Z" level=info msg="RemoveContainer for \"ee2052eecc8d00b6063cd7fd1291b51492dd85ae27f940061bc86256471599a1\" returns successfully" Oct 2 21:29:43.722375 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27-rootfs.mount: Deactivated successfully. Oct 2 21:29:45.921446 kubelet[2475]: W1002 21:29:45.921400 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod85b7d022_8d62_4b69_a0c9_ecdbd6f1e0aa.slice/cri-containerd-5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27.scope WatchSource:0}: task 5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27 not found: not found Oct 2 21:29:47.939308 kubelet[2475]: E1002 21:29:47.939272 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:50.414000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:50.423279 kernel: kauditd_printk_skb: 82 callbacks suppressed Oct 2 21:29:50.423571 kernel: audit: type=1400 audit(1696282190.414:1390): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:50.414000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027a8ce0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:29:50.479921 kernel: audit: type=1300 audit(1696282190.414:1390): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027a8ce0 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:29:50.414000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:50.506632 kernel: audit: type=1327 audit(1696282190.414:1390): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:50.506805 kernel: audit: type=1400 audit(1696282190.414:1392): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:50.414000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:50.414000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027a8e00 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:29:50.570310 kernel: audit: type=1300 audit(1696282190.414:1392): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40027a8e00 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:29:50.414000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:50.595854 kernel: audit: type=1327 audit(1696282190.414:1392): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:50.596016 kernel: audit: type=1400 audit(1696282190.414:1391): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:50.414000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:50.414000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002513720 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:29:50.661442 kernel: audit: type=1300 audit(1696282190.414:1391): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002513720 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:29:50.414000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:50.686860 kernel: audit: type=1327 audit(1696282190.414:1391): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:50.687007 kernel: audit: type=1400 audit(1696282190.416:1393): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:50.416000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:29:50.416000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002513740 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:29:50.416000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:29:52.939875 kubelet[2475]: E1002 21:29:52.939826 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:29:55.704933 kubelet[2475]: E1002 21:29:55.704877 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-q6n5j_kube-system(85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa)\"" pod="kube-system/cilium-q6n5j" podUID=85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa Oct 2 21:29:57.940834 kubelet[2475]: E1002 21:29:57.940797 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:02.941772 kubelet[2475]: E1002 21:30:02.941744 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:07.943013 kubelet[2475]: E1002 21:30:07.942978 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:09.707049 env[1353]: time="2023-10-02T21:30:09.707000918Z" level=info msg="CreateContainer within sandbox \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 21:30:09.727322 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1444326545.mount: Deactivated successfully. Oct 2 21:30:09.733894 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3717674358.mount: Deactivated successfully. Oct 2 21:30:09.742522 env[1353]: time="2023-10-02T21:30:09.742476082Z" level=info msg="CreateContainer within sandbox \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d\"" Oct 2 21:30:09.744390 env[1353]: time="2023-10-02T21:30:09.744354568Z" level=info msg="StartContainer for \"adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d\"" Oct 2 21:30:09.768106 systemd[1]: Started cri-containerd-adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d.scope. Oct 2 21:30:09.785478 systemd[1]: cri-containerd-adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d.scope: Deactivated successfully. Oct 2 21:30:09.818246 env[1353]: time="2023-10-02T21:30:09.818172701Z" level=info msg="shim disconnected" id=adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d Oct 2 21:30:09.818658 env[1353]: time="2023-10-02T21:30:09.818320295Z" level=warning msg="cleaning up after shim disconnected" id=adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d namespace=k8s.io Oct 2 21:30:09.818658 env[1353]: time="2023-10-02T21:30:09.818333295Z" level=info msg="cleaning up dead shim" Oct 2 21:30:09.838957 env[1353]: time="2023-10-02T21:30:09.838902845Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:30:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3698 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:30:09Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:30:09.839253 env[1353]: time="2023-10-02T21:30:09.839167354Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 21:30:09.842329 env[1353]: time="2023-10-02T21:30:09.842283511Z" level=error msg="Failed to pipe stdout of container \"adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d\"" error="reading from a closed fifo" Oct 2 21:30:09.842413 env[1353]: time="2023-10-02T21:30:09.842360868Z" level=error msg="Failed to pipe stderr of container \"adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d\"" error="reading from a closed fifo" Oct 2 21:30:09.845673 env[1353]: time="2023-10-02T21:30:09.845621420Z" level=error msg="StartContainer for \"adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:30:09.846317 kubelet[2475]: E1002 21:30:09.845876 2475 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d" Oct 2 21:30:09.846841 kubelet[2475]: E1002 21:30:09.846754 2475 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:30:09.846841 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:30:09.846841 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 21:30:09.846841 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-smn22,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-q6n5j_kube-system(85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:30:09.846841 kubelet[2475]: E1002 21:30:09.846822 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-q6n5j" podUID=85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa Oct 2 21:30:10.539247 kubelet[2475]: I1002 21:30:10.539157 2475 scope.go:115] "RemoveContainer" containerID="5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27" Oct 2 21:30:10.539589 kubelet[2475]: I1002 21:30:10.539543 2475 scope.go:115] "RemoveContainer" containerID="5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27" Oct 2 21:30:10.541709 env[1353]: time="2023-10-02T21:30:10.541676174Z" level=info msg="RemoveContainer for \"5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27\"" Oct 2 21:30:10.541905 env[1353]: time="2023-10-02T21:30:10.541865607Z" level=info msg="RemoveContainer for \"5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27\"" Oct 2 21:30:10.542003 env[1353]: time="2023-10-02T21:30:10.541974402Z" level=error msg="RemoveContainer for \"5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27\" failed" error="failed to set removing state for container \"5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27\": container is already in removing state" Oct 2 21:30:10.542287 kubelet[2475]: E1002 21:30:10.542262 2475 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27\": container is already in removing state" containerID="5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27" Oct 2 21:30:10.542379 kubelet[2475]: I1002 21:30:10.542298 2475 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27} err="rpc error: code = Unknown desc = failed to set removing state for container \"5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27\": container is already in removing state" Oct 2 21:30:10.549479 env[1353]: time="2023-10-02T21:30:10.549433750Z" level=info msg="RemoveContainer for \"5584d305f6388fb44ce1e16e380235c07c40a9191d587a2c95a58209876e2b27\" returns successfully" Oct 2 21:30:10.549965 kubelet[2475]: E1002 21:30:10.549927 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-q6n5j_kube-system(85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa)\"" pod="kube-system/cilium-q6n5j" podUID=85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa Oct 2 21:30:10.723861 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d-rootfs.mount: Deactivated successfully. Oct 2 21:30:12.924844 kubelet[2475]: W1002 21:30:12.924809 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod85b7d022_8d62_4b69_a0c9_ecdbd6f1e0aa.slice/cri-containerd-adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d.scope WatchSource:0}: task adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d not found: not found Oct 2 21:30:12.944448 kubelet[2475]: E1002 21:30:12.944421 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:17.946008 kubelet[2475]: E1002 21:30:17.945973 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:22.947371 kubelet[2475]: E1002 21:30:22.947326 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:24.705136 kubelet[2475]: E1002 21:30:24.704818 2475 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-q6n5j_kube-system(85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa)\"" pod="kube-system/cilium-q6n5j" podUID=85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa Oct 2 21:30:27.948057 kubelet[2475]: E1002 21:30:27.948024 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:31.626847 env[1353]: time="2023-10-02T21:30:31.626791136Z" level=info msg="StopPodSandbox for \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\"" Oct 2 21:30:31.627525 env[1353]: time="2023-10-02T21:30:31.627493472Z" level=info msg="Container to stop \"adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:30:31.629076 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5-shm.mount: Deactivated successfully. Oct 2 21:30:31.646155 systemd[1]: cri-containerd-c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5.scope: Deactivated successfully. Oct 2 21:30:31.657576 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 21:30:31.657631 kernel: audit: type=1334 audit(1696282231.645:1394): prog-id=129 op=UNLOAD Oct 2 21:30:31.645000 audit: BPF prog-id=129 op=UNLOAD Oct 2 21:30:31.660000 audit: BPF prog-id=132 op=UNLOAD Oct 2 21:30:31.674088 kernel: audit: type=1334 audit(1696282231.660:1395): prog-id=132 op=UNLOAD Oct 2 21:30:31.696516 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5-rootfs.mount: Deactivated successfully. Oct 2 21:30:31.722498 env[1353]: time="2023-10-02T21:30:31.722431493Z" level=info msg="shim disconnected" id=c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5 Oct 2 21:30:31.722498 env[1353]: time="2023-10-02T21:30:31.722489531Z" level=warning msg="cleaning up after shim disconnected" id=c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5 namespace=k8s.io Oct 2 21:30:31.722498 env[1353]: time="2023-10-02T21:30:31.722499370Z" level=info msg="cleaning up dead shim" Oct 2 21:30:31.741178 env[1353]: time="2023-10-02T21:30:31.741124403Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:30:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3730 runtime=io.containerd.runc.v2\n" Oct 2 21:30:31.741634 env[1353]: time="2023-10-02T21:30:31.741602506Z" level=info msg="TearDown network for sandbox \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\" successfully" Oct 2 21:30:31.741689 env[1353]: time="2023-10-02T21:30:31.741634865Z" level=info msg="StopPodSandbox for \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\" returns successfully" Oct 2 21:30:31.792543 sshd[3497]: pam_unix(sshd:session): session closed for user core Oct 2 21:30:31.792000 audit[3497]: USER_END pid=3497 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:30:31.836964 kubelet[2475]: I1002 21:30:31.836907 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-xtables-lock\") pod \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " Oct 2 21:30:31.836964 kubelet[2475]: I1002 21:30:31.836947 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-bpf-maps\") pod \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " Oct 2 21:30:31.836964 kubelet[2475]: I1002 21:30:31.836966 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cni-path\") pod \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " Oct 2 21:30:31.837406 kubelet[2475]: I1002 21:30:31.836983 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-run\") pod \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " Oct 2 21:30:31.837406 kubelet[2475]: I1002 21:30:31.837002 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-etc-cni-netd\") pod \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " Oct 2 21:30:31.837406 kubelet[2475]: I1002 21:30:31.837018 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-lib-modules\") pod \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " Oct 2 21:30:31.837406 kubelet[2475]: I1002 21:30:31.837044 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-config-path\") pod \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " Oct 2 21:30:31.837406 kubelet[2475]: I1002 21:30:31.837069 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-ipsec-secrets\") pod \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " Oct 2 21:30:31.837406 kubelet[2475]: I1002 21:30:31.837088 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-clustermesh-secrets\") pod \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " Oct 2 21:30:31.837406 kubelet[2475]: I1002 21:30:31.837105 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-cgroup\") pod \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " Oct 2 21:30:31.837406 kubelet[2475]: I1002 21:30:31.837124 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-host-proc-sys-net\") pod \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " Oct 2 21:30:31.837406 kubelet[2475]: I1002 21:30:31.837142 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-host-proc-sys-kernel\") pod \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " Oct 2 21:30:31.837406 kubelet[2475]: I1002 21:30:31.837162 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-hubble-tls\") pod \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " Oct 2 21:30:31.837406 kubelet[2475]: I1002 21:30:31.837178 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-hostproc\") pod \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " Oct 2 21:30:31.837406 kubelet[2475]: I1002 21:30:31.837198 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-smn22\" (UniqueName: \"kubernetes.io/projected/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-kube-api-access-smn22\") pod \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\" (UID: \"85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa\") " Oct 2 21:30:31.837808 systemd[1]: sshd@29-10.200.20.19:22-10.200.12.6:34034.service: Deactivated successfully. Oct 2 21:30:31.792000 audit[3497]: CRED_DISP pid=3497 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:30:31.839553 kubelet[2475]: W1002 21:30:31.838355 2475 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 21:30:31.838569 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 21:30:31.838731 systemd[1]: session-32.scope: Consumed 1.478s CPU time. Oct 2 21:30:31.841019 kubelet[2475]: I1002 21:30:31.840985 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa" (UID: "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 21:30:31.841163 kubelet[2475]: I1002 21:30:31.841144 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa" (UID: "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:31.841268 kubelet[2475]: I1002 21:30:31.841254 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa" (UID: "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:31.841367 kubelet[2475]: I1002 21:30:31.841355 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cni-path" (OuterVolumeSpecName: "cni-path") pod "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa" (UID: "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:31.841472 kubelet[2475]: I1002 21:30:31.841459 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa" (UID: "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:31.841556 kubelet[2475]: I1002 21:30:31.841543 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa" (UID: "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:31.841635 kubelet[2475]: I1002 21:30:31.841623 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa" (UID: "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:31.863123 kernel: audit: type=1106 audit(1696282231.792:1396): pid=3497 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:30:31.864288 kernel: audit: type=1104 audit(1696282231.792:1397): pid=3497 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:30:31.864708 kernel: audit: type=1131 audit(1696282231.836:1398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.19:22-10.200.12.6:34034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:30:31.836000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.19:22-10.200.12.6:34034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:30:31.862311 systemd[1]: var-lib-kubelet-pods-85b7d022\x2d8d62\x2d4b69\x2da0c9\x2decdbd6f1e0aa-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dsmn22.mount: Deactivated successfully. Oct 2 21:30:31.864531 systemd-logind[1338]: Session 32 logged out. Waiting for processes to exit. Oct 2 21:30:31.885742 systemd[1]: var-lib-kubelet-pods-85b7d022\x2d8d62\x2d4b69\x2da0c9\x2decdbd6f1e0aa-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 21:30:31.889734 kubelet[2475]: I1002 21:30:31.886548 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-kube-api-access-smn22" (OuterVolumeSpecName: "kube-api-access-smn22") pod "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa" (UID: "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa"). InnerVolumeSpecName "kube-api-access-smn22". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:30:31.889734 kubelet[2475]: I1002 21:30:31.886604 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa" (UID: "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:31.889734 kubelet[2475]: I1002 21:30:31.886811 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa" (UID: "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:31.889734 kubelet[2475]: I1002 21:30:31.886962 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa" (UID: "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:31.889734 kubelet[2475]: I1002 21:30:31.886985 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-hostproc" (OuterVolumeSpecName: "hostproc") pod "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa" (UID: "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:30:31.891635 systemd-logind[1338]: Removed session 32. Oct 2 21:30:31.894606 kubelet[2475]: I1002 21:30:31.894157 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa" (UID: "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 21:30:31.899287 systemd[1]: var-lib-kubelet-pods-85b7d022\x2d8d62\x2d4b69\x2da0c9\x2decdbd6f1e0aa-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 21:30:31.907066 kubelet[2475]: I1002 21:30:31.907026 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa" (UID: "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 21:30:31.911798 kubelet[2475]: I1002 21:30:31.911759 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa" (UID: "85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:30:31.937913 kubelet[2475]: I1002 21:30:31.937878 2475 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cni-path\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:30:31.937913 kubelet[2475]: I1002 21:30:31.937912 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-run\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:30:31.938078 kubelet[2475]: I1002 21:30:31.937927 2475 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-etc-cni-netd\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:30:31.938078 kubelet[2475]: I1002 21:30:31.937940 2475 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-lib-modules\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:30:31.938078 kubelet[2475]: I1002 21:30:31.937950 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-config-path\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:30:31.938078 kubelet[2475]: I1002 21:30:31.937960 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:30:31.938078 kubelet[2475]: I1002 21:30:31.937970 2475 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-clustermesh-secrets\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:30:31.938078 kubelet[2475]: I1002 21:30:31.937981 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-cilium-cgroup\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:30:31.938078 kubelet[2475]: I1002 21:30:31.937991 2475 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-host-proc-sys-net\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:30:31.938078 kubelet[2475]: I1002 21:30:31.938001 2475 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:30:31.938078 kubelet[2475]: I1002 21:30:31.938011 2475 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-hubble-tls\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:30:31.938078 kubelet[2475]: I1002 21:30:31.938020 2475 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-hostproc\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:30:31.938078 kubelet[2475]: I1002 21:30:31.938029 2475 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-smn22\" (UniqueName: \"kubernetes.io/projected/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-kube-api-access-smn22\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:30:31.938078 kubelet[2475]: I1002 21:30:31.938039 2475 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-xtables-lock\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:30:31.938078 kubelet[2475]: I1002 21:30:31.938048 2475 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa-bpf-maps\") on node \"ci-3510.3.0-a-74bdccafa3\" DevicePath \"\"" Oct 2 21:30:32.584965 kubelet[2475]: I1002 21:30:32.584938 2475 scope.go:115] "RemoveContainer" containerID="adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d" Oct 2 21:30:32.589025 systemd[1]: Removed slice kubepods-burstable-pod85b7d022_8d62_4b69_a0c9_ecdbd6f1e0aa.slice. Oct 2 21:30:32.592007 env[1353]: time="2023-10-02T21:30:32.591960148Z" level=info msg="RemoveContainer for \"adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d\"" Oct 2 21:30:32.603771 env[1353]: time="2023-10-02T21:30:32.603708382Z" level=info msg="RemoveContainer for \"adaa3f350f42662846f2790303000701e1a80cd31b0f5d5987bfbd100b97181d\" returns successfully" Oct 2 21:30:32.629210 systemd[1]: var-lib-kubelet-pods-85b7d022\x2d8d62\x2d4b69\x2da0c9\x2decdbd6f1e0aa-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 21:30:32.767000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:32.768000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:32.826529 kernel: audit: type=1400 audit(1696282232.767:1399): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:32.826692 kernel: audit: type=1400 audit(1696282232.768:1400): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:32.826817 kernel: audit: type=1300 audit(1696282232.768:1400): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002210180 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:30:32.768000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002210180 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:30:32.768000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:32.881019 kernel: audit: type=1327 audit(1696282232.768:1400): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:32.881145 kernel: audit: type=1300 audit(1696282232.767:1399): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400178a720 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:30:32.767000 audit[2294]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400178a720 a2=fc6 a3=0 items=0 ppid=2170 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:30:32.767000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:32.949507 kubelet[2475]: E1002 21:30:32.949485 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:33.129000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:33.129000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:33.129000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4007acdac0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:30:33.129000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40052a07e0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:30:33.129000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:30:33.129000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:30:33.184000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:33.184000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:33.184000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4008323bf0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:30:33.184000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:30:33.184000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:33.184000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40052a0f30 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:30:33.184000 audit[2350]: AVC avc: denied { watch } for pid=2350 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=520995 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:33.184000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4008323ce0 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:30:33.184000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:30:33.184000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:30:33.184000 audit[2350]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4006b21c80 a2=fc6 a3=0 items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c922 key=(null) Oct 2 21:30:33.184000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:30:33.706914 kubelet[2475]: I1002 21:30:33.706886 2475 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa path="/var/lib/kubelet/pods/85b7d022-8d62-4b69-a0c9-ecdbd6f1e0aa/volumes" Oct 2 21:30:37.652891 env[1353]: time="2023-10-02T21:30:37.652852345Z" level=info msg="StopPodSandbox for \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\"" Oct 2 21:30:37.653432 env[1353]: time="2023-10-02T21:30:37.653381847Z" level=info msg="TearDown network for sandbox \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\" successfully" Oct 2 21:30:37.653537 env[1353]: time="2023-10-02T21:30:37.653520443Z" level=info msg="StopPodSandbox for \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\" returns successfully" Oct 2 21:30:37.653889 env[1353]: time="2023-10-02T21:30:37.653861191Z" level=info msg="RemovePodSandbox for \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\"" Oct 2 21:30:37.653953 env[1353]: time="2023-10-02T21:30:37.653894630Z" level=info msg="Forcibly stopping sandbox \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\"" Oct 2 21:30:37.653986 env[1353]: time="2023-10-02T21:30:37.653961468Z" level=info msg="TearDown network for sandbox \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\" successfully" Oct 2 21:30:37.660321 env[1353]: time="2023-10-02T21:30:37.660272536Z" level=info msg="RemovePodSandbox \"c7b79185b0421eb6d634a7ef90b154858e13c8b7fef7cf849c51a7f7ce647ef5\" returns successfully" Oct 2 21:30:37.951546 kubelet[2475]: E1002 21:30:37.951423 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:42.952825 kubelet[2475]: E1002 21:30:42.952798 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:46.617620 kubelet[2475]: E1002 21:30:46.617590 2475 controller.go:193] "Failed to update lease" err="Put \"https://10.200.20.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74bdccafa3?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 21:30:46.977690 systemd[1]: cri-containerd-670b3e32fc791ede0a6ba2d2f8e4351c8322bda574af78b8afec128682a59d1f.scope: Deactivated successfully. Oct 2 21:30:46.978038 systemd[1]: cri-containerd-670b3e32fc791ede0a6ba2d2f8e4351c8322bda574af78b8afec128682a59d1f.scope: Consumed 3.563s CPU time. Oct 2 21:30:46.981000 audit: BPF prog-id=80 op=UNLOAD Oct 2 21:30:46.986580 kernel: kauditd_printk_skb: 19 callbacks suppressed Oct 2 21:30:46.986681 kernel: audit: type=1334 audit(1696282246.981:1407): prog-id=80 op=UNLOAD Oct 2 21:30:46.981000 audit: BPF prog-id=103 op=UNLOAD Oct 2 21:30:46.999510 kernel: audit: type=1334 audit(1696282246.981:1408): prog-id=103 op=UNLOAD Oct 2 21:30:47.025217 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-670b3e32fc791ede0a6ba2d2f8e4351c8322bda574af78b8afec128682a59d1f-rootfs.mount: Deactivated successfully. Oct 2 21:30:47.081667 env[1353]: time="2023-10-02T21:30:47.081619338Z" level=info msg="shim disconnected" id=670b3e32fc791ede0a6ba2d2f8e4351c8322bda574af78b8afec128682a59d1f Oct 2 21:30:47.082224 env[1353]: time="2023-10-02T21:30:47.082193240Z" level=warning msg="cleaning up after shim disconnected" id=670b3e32fc791ede0a6ba2d2f8e4351c8322bda574af78b8afec128682a59d1f namespace=k8s.io Oct 2 21:30:47.082361 env[1353]: time="2023-10-02T21:30:47.082345195Z" level=info msg="cleaning up dead shim" Oct 2 21:30:47.095692 env[1353]: time="2023-10-02T21:30:47.095652211Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:30:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3765 runtime=io.containerd.runc.v2\n" Oct 2 21:30:47.612819 kubelet[2475]: I1002 21:30:47.612792 2475 scope.go:115] "RemoveContainer" containerID="670b3e32fc791ede0a6ba2d2f8e4351c8322bda574af78b8afec128682a59d1f" Oct 2 21:30:47.615777 env[1353]: time="2023-10-02T21:30:47.615701925Z" level=info msg="CreateContainer within sandbox \"f56a7f153584def0a1a633280a6b38c345ba6334f8ed769f4dffa871581c1578\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 21:30:47.638284 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1402129968.mount: Deactivated successfully. Oct 2 21:30:47.646945 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2567140629.mount: Deactivated successfully. Oct 2 21:30:47.656383 env[1353]: time="2023-10-02T21:30:47.656335591Z" level=info msg="CreateContainer within sandbox \"f56a7f153584def0a1a633280a6b38c345ba6334f8ed769f4dffa871581c1578\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"6c176090c172ec29969cbb50735ade2d44b6acd1d9c9e7efefbad008614f8bc2\"" Oct 2 21:30:47.656983 env[1353]: time="2023-10-02T21:30:47.656933732Z" level=info msg="StartContainer for \"6c176090c172ec29969cbb50735ade2d44b6acd1d9c9e7efefbad008614f8bc2\"" Oct 2 21:30:47.677618 systemd[1]: Started cri-containerd-6c176090c172ec29969cbb50735ade2d44b6acd1d9c9e7efefbad008614f8bc2.scope. Oct 2 21:30:47.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.746931 kernel: audit: type=1400 audit(1696282247.695:1409): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.747038 kernel: audit: type=1400 audit(1696282247.695:1410): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.763683 kernel: audit: type=1400 audit(1696282247.695:1411): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.781305 kernel: audit: type=1400 audit(1696282247.695:1412): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.781418 kernel: audit: type=1400 audit(1696282247.695:1413): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.830618 kernel: audit: type=1400 audit(1696282247.695:1414): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.831032 kernel: audit: type=1400 audit(1696282247.695:1415): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.848477 kernel: audit: type=1400 audit(1696282247.695:1416): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.728000 audit: BPF prog-id=133 op=LOAD Oct 2 21:30:47.746000 audit[3786]: AVC avc: denied { bpf } for pid=3786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.746000 audit[3786]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2170 pid=3786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:30:47.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663313736303930633137326563323939363963626235303733356164 Oct 2 21:30:47.746000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.746000 audit[3786]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2170 pid=3786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:30:47.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663313736303930633137326563323939363963626235303733356164 Oct 2 21:30:47.746000 audit[3786]: AVC avc: denied { bpf } for pid=3786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.746000 audit[3786]: AVC avc: denied { bpf } for pid=3786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.746000 audit[3786]: AVC avc: denied { bpf } for pid=3786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.746000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.746000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.746000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.746000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.746000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.746000 audit[3786]: AVC avc: denied { bpf } for pid=3786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.746000 audit[3786]: AVC avc: denied { bpf } for pid=3786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.746000 audit: BPF prog-id=134 op=LOAD Oct 2 21:30:47.746000 audit[3786]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2170 pid=3786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:30:47.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663313736303930633137326563323939363963626235303733356164 Oct 2 21:30:47.763000 audit[3786]: AVC avc: denied { bpf } for pid=3786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.763000 audit[3786]: AVC avc: denied { bpf } for pid=3786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.763000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.763000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.763000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.763000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.763000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.763000 audit[3786]: AVC avc: denied { bpf } for pid=3786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.763000 audit[3786]: AVC avc: denied { bpf } for pid=3786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.763000 audit: BPF prog-id=135 op=LOAD Oct 2 21:30:47.763000 audit[3786]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2170 pid=3786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:30:47.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663313736303930633137326563323939363963626235303733356164 Oct 2 21:30:47.780000 audit: BPF prog-id=135 op=UNLOAD Oct 2 21:30:47.780000 audit: BPF prog-id=134 op=UNLOAD Oct 2 21:30:47.780000 audit[3786]: AVC avc: denied { bpf } for pid=3786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.780000 audit[3786]: AVC avc: denied { bpf } for pid=3786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.780000 audit[3786]: AVC avc: denied { bpf } for pid=3786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.780000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.780000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.780000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.780000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.780000 audit[3786]: AVC avc: denied { perfmon } for pid=3786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.780000 audit[3786]: AVC avc: denied { bpf } for pid=3786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.780000 audit[3786]: AVC avc: denied { bpf } for pid=3786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:47.780000 audit: BPF prog-id=136 op=LOAD Oct 2 21:30:47.780000 audit[3786]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2170 pid=3786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:30:47.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663313736303930633137326563323939363963626235303733356164 Oct 2 21:30:47.896917 env[1353]: time="2023-10-02T21:30:47.896856889Z" level=info msg="StartContainer for \"6c176090c172ec29969cbb50735ade2d44b6acd1d9c9e7efefbad008614f8bc2\" returns successfully" Oct 2 21:30:47.954596 kubelet[2475]: E1002 21:30:47.954528 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:49.638594 kubelet[2475]: E1002 21:30:49.638374 2475 controller.go:193] "Failed to update lease" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.19:53180->10.200.20.11:2379: read: connection timed out" Oct 2 21:30:49.641887 systemd[1]: cri-containerd-258cd3b79497f68c68868ca2fc46edcf732752e718589f6e541f29aaa39dcda4.scope: Deactivated successfully. Oct 2 21:30:49.642180 systemd[1]: cri-containerd-258cd3b79497f68c68868ca2fc46edcf732752e718589f6e541f29aaa39dcda4.scope: Consumed 3.612s CPU time. Oct 2 21:30:49.647000 audit: BPF prog-id=88 op=UNLOAD Oct 2 21:30:49.647000 audit: BPF prog-id=97 op=UNLOAD Oct 2 21:30:49.680178 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-258cd3b79497f68c68868ca2fc46edcf732752e718589f6e541f29aaa39dcda4-rootfs.mount: Deactivated successfully. Oct 2 21:30:49.717030 env[1353]: time="2023-10-02T21:30:49.716962322Z" level=info msg="shim disconnected" id=258cd3b79497f68c68868ca2fc46edcf732752e718589f6e541f29aaa39dcda4 Oct 2 21:30:49.717030 env[1353]: time="2023-10-02T21:30:49.717019000Z" level=warning msg="cleaning up after shim disconnected" id=258cd3b79497f68c68868ca2fc46edcf732752e718589f6e541f29aaa39dcda4 namespace=k8s.io Oct 2 21:30:49.717030 env[1353]: time="2023-10-02T21:30:49.717029319Z" level=info msg="cleaning up dead shim" Oct 2 21:30:49.744339 env[1353]: time="2023-10-02T21:30:49.744289620Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:30:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3824 runtime=io.containerd.runc.v2\n" Oct 2 21:30:50.209000 audit[3796]: AVC avc: denied { watch } for pid=3796 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=520999 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:50.209000 audit[3796]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000de6000 a2=fc6 a3=0 items=0 ppid=2170 pid=3796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:30:50.209000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:50.210000 audit[3796]: AVC avc: denied { watch } for pid=3796 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:30:50.210000 audit[3796]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000053440 a2=fc6 a3=0 items=0 ppid=2170 pid=3796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c206,c553 key=(null) Oct 2 21:30:50.210000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:30:50.621764 kubelet[2475]: I1002 21:30:50.620725 2475 scope.go:115] "RemoveContainer" containerID="258cd3b79497f68c68868ca2fc46edcf732752e718589f6e541f29aaa39dcda4" Oct 2 21:30:50.623663 env[1353]: time="2023-10-02T21:30:50.623603330Z" level=info msg="CreateContainer within sandbox \"800e38148ed0222e6bd71d1a7e87acb23e3f5c69a9b5a235e17869766ae3caf3\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 21:30:50.640304 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount163138683.mount: Deactivated successfully. Oct 2 21:30:50.645509 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3254891824.mount: Deactivated successfully. Oct 2 21:30:50.655527 env[1353]: time="2023-10-02T21:30:50.655482371Z" level=info msg="CreateContainer within sandbox \"800e38148ed0222e6bd71d1a7e87acb23e3f5c69a9b5a235e17869766ae3caf3\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"f2a20755f9a91b50bdd30dfa85500363c78baf8ced590c5fa31cdeb08ec4e7c6\"" Oct 2 21:30:50.656131 env[1353]: time="2023-10-02T21:30:50.656107751Z" level=info msg="StartContainer for \"f2a20755f9a91b50bdd30dfa85500363c78baf8ced590c5fa31cdeb08ec4e7c6\"" Oct 2 21:30:50.677595 systemd[1]: Started cri-containerd-f2a20755f9a91b50bdd30dfa85500363c78baf8ced590c5fa31cdeb08ec4e7c6.scope. Oct 2 21:30:50.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.698000 audit: BPF prog-id=137 op=LOAD Oct 2 21:30:50.699000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.699000 audit[3844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2212 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:30:50.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632613230373535663961393162353062646433306466613835353030 Oct 2 21:30:50.699000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.699000 audit[3844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2212 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:30:50.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632613230373535663961393162353062646433306466613835353030 Oct 2 21:30:50.699000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.699000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.699000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.699000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.699000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.699000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.699000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.699000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.699000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.699000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.699000 audit: BPF prog-id=138 op=LOAD Oct 2 21:30:50.699000 audit[3844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2212 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:30:50.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632613230373535663961393162353062646433306466613835353030 Oct 2 21:30:50.700000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.700000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.700000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.700000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.700000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.700000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.700000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.700000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.700000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.700000 audit: BPF prog-id=139 op=LOAD Oct 2 21:30:50.700000 audit[3844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2212 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:30:50.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632613230373535663961393162353062646433306466613835353030 Oct 2 21:30:50.701000 audit: BPF prog-id=139 op=UNLOAD Oct 2 21:30:50.701000 audit: BPF prog-id=138 op=UNLOAD Oct 2 21:30:50.701000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.701000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.701000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.701000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.701000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.701000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.701000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.701000 audit[3844]: AVC avc: denied { perfmon } for pid=3844 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.701000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.701000 audit[3844]: AVC avc: denied { bpf } for pid=3844 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:30:50.701000 audit: BPF prog-id=140 op=LOAD Oct 2 21:30:50.701000 audit[3844]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2212 pid=3844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:30:50.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632613230373535663961393162353062646433306466613835353030 Oct 2 21:30:50.741543 env[1353]: time="2023-10-02T21:30:50.741431676Z" level=info msg="StartContainer for \"f2a20755f9a91b50bdd30dfa85500363c78baf8ced590c5fa31cdeb08ec4e7c6\" returns successfully" Oct 2 21:30:52.955852 kubelet[2475]: E1002 21:30:52.955802 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:55.648041 kubelet[2475]: I1002 21:30:55.648000 2475 status_manager.go:809] "Failed to get status for pod" podUID=71d75891f97f771c6692d820126002b8 pod="kube-system/kube-apiserver-ci-3510.3.0-a-74bdccafa3" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.19:53066->10.200.20.11:2379: read: connection timed out" Oct 2 21:30:57.957296 kubelet[2475]: E1002 21:30:57.957095 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:30:59.639253 kubelet[2475]: E1002 21:30:59.639217 2475 controller.go:193] "Failed to update lease" err="Put \"https://10.200.20.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74bdccafa3?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 21:30:59.936399 kubelet[2475]: E1002 21:30:59.936216 2475 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"kube-apiserver-ci-3510.3.0-a-74bdccafa3.178a67b51b9d8cb6", GenerateName:"", Namespace:"kube-system", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Pod", Namespace:"kube-system", Name:"kube-apiserver-ci-3510.3.0-a-74bdccafa3", UID:"71d75891f97f771c6692d820126002b8", APIVersion:"v1", ResourceVersion:"", FieldPath:"spec.containers{kube-apiserver}"}, Reason:"Unhealthy", Message:"Readiness probe failed: HTTP probe failed with statuscode: 500", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-74bdccafa3"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 30, 37, 208464566, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 30, 37, 208464566, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.19:52972->10.200.20.11:2379: read: connection timed out' (will not retry!) Oct 2 21:31:02.958316 kubelet[2475]: E1002 21:31:02.958260 2475 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"