Oct 2 21:40:00.097526 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 21:40:00.097545 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 21:40:00.097553 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Oct 2 21:40:00.097560 kernel: printk: bootconsole [pl11] enabled Oct 2 21:40:00.097565 kernel: efi: EFI v2.70 by EDK II Oct 2 21:40:00.097571 kernel: efi: ACPI 2.0=0x3fd8d018 SMBIOS=0x3fd6a000 SMBIOS 3.0=0x3fd68000 MEMATTR=0x3ef3d098 RNG=0x3fd8d998 MEMRESERVE=0x37eb7f98 Oct 2 21:40:00.097577 kernel: random: crng init done Oct 2 21:40:00.097583 kernel: ACPI: Early table checksum verification disabled Oct 2 21:40:00.097588 kernel: ACPI: RSDP 0x000000003FD8D018 000024 (v02 VRTUAL) Oct 2 21:40:00.097593 kernel: ACPI: XSDT 0x000000003FD8DF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:40:00.097599 kernel: ACPI: FACP 0x000000003FD8DC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:40:00.097605 kernel: ACPI: DSDT 0x000000003EBD6018 01DEC0 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 21:40:00.097611 kernel: ACPI: DBG2 0x000000003FD8DB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:40:00.097616 kernel: ACPI: GTDT 0x000000003FD8DD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:40:00.097623 kernel: ACPI: OEM0 0x000000003FD8D098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:40:00.097629 kernel: ACPI: SPCR 0x000000003FD8DA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:40:00.097635 kernel: ACPI: APIC 0x000000003FD8D818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:40:00.097641 kernel: ACPI: SRAT 0x000000003FD8D198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:40:00.097647 kernel: ACPI: PPTT 0x000000003FD8D418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Oct 2 21:40:00.097653 kernel: ACPI: BGRT 0x000000003FD8DE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 21:40:00.097658 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Oct 2 21:40:00.097664 kernel: NUMA: Failed to initialise from firmware Oct 2 21:40:00.097670 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 21:40:00.097675 kernel: NUMA: NODE_DATA [mem 0x1bf7f0900-0x1bf7f5fff] Oct 2 21:40:00.097681 kernel: Zone ranges: Oct 2 21:40:00.097687 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Oct 2 21:40:00.097692 kernel: DMA32 empty Oct 2 21:40:00.097699 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 21:40:00.097705 kernel: Movable zone start for each node Oct 2 21:40:00.097711 kernel: Early memory node ranges Oct 2 21:40:00.097716 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Oct 2 21:40:00.097722 kernel: node 0: [mem 0x0000000000824000-0x000000003ec84fff] Oct 2 21:40:00.097727 kernel: node 0: [mem 0x000000003ec85000-0x000000003ecadfff] Oct 2 21:40:00.097733 kernel: node 0: [mem 0x000000003ecae000-0x000000003fd2dfff] Oct 2 21:40:00.097739 kernel: node 0: [mem 0x000000003fd2e000-0x000000003fd81fff] Oct 2 21:40:00.097744 kernel: node 0: [mem 0x000000003fd82000-0x000000003fd8dfff] Oct 2 21:40:00.097750 kernel: node 0: [mem 0x000000003fd8e000-0x000000003fd91fff] Oct 2 21:40:00.097755 kernel: node 0: [mem 0x000000003fd92000-0x000000003fffffff] Oct 2 21:40:00.097761 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 21:40:00.097768 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 21:40:00.097776 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Oct 2 21:40:00.097782 kernel: psci: probing for conduit method from ACPI. Oct 2 21:40:00.097789 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 21:40:00.097794 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 21:40:00.097802 kernel: psci: MIGRATE_INFO_TYPE not supported. Oct 2 21:40:00.097808 kernel: psci: SMC Calling Convention v1.4 Oct 2 21:40:00.097814 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Oct 2 21:40:00.097820 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Oct 2 21:40:00.097826 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 21:40:00.097832 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 21:40:00.097838 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 21:40:00.097844 kernel: Detected PIPT I-cache on CPU0 Oct 2 21:40:00.097850 kernel: CPU features: detected: GIC system register CPU interface Oct 2 21:40:00.097856 kernel: CPU features: detected: Hardware dirty bit management Oct 2 21:40:00.097862 kernel: CPU features: detected: Spectre-BHB Oct 2 21:40:00.097868 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 21:40:00.097875 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 21:40:00.097881 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 21:40:00.097887 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Oct 2 21:40:00.097893 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Oct 2 21:40:00.097899 kernel: Policy zone: Normal Oct 2 21:40:00.097907 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 21:40:00.097913 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 21:40:00.097919 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 21:40:00.097925 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 21:40:00.097931 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 21:40:00.097939 kernel: software IO TLB: mapped [mem 0x000000003abd6000-0x000000003ebd6000] (64MB) Oct 2 21:40:00.097945 kernel: Memory: 3992056K/4194160K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 202104K reserved, 0K cma-reserved) Oct 2 21:40:00.097951 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 21:40:00.097957 kernel: trace event string verifier disabled Oct 2 21:40:00.097963 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 21:40:00.097970 kernel: rcu: RCU event tracing is enabled. Oct 2 21:40:00.097976 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 21:40:00.097983 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 21:40:00.097989 kernel: Tracing variant of Tasks RCU enabled. Oct 2 21:40:00.097995 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 21:40:00.098001 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 21:40:00.098009 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 21:40:00.098014 kernel: GICv3: 960 SPIs implemented Oct 2 21:40:00.098020 kernel: GICv3: 0 Extended SPIs implemented Oct 2 21:40:00.098026 kernel: GICv3: Distributor has no Range Selector support Oct 2 21:40:00.098032 kernel: Root IRQ handler: gic_handle_irq Oct 2 21:40:00.098038 kernel: GICv3: 16 PPIs implemented Oct 2 21:40:00.098045 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Oct 2 21:40:00.098051 kernel: ITS: No ITS available, not enabling LPIs Oct 2 21:40:00.098057 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 21:40:00.098063 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 21:40:00.098069 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 21:40:00.098075 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 21:40:00.098082 kernel: Console: colour dummy device 80x25 Oct 2 21:40:00.098089 kernel: printk: console [tty1] enabled Oct 2 21:40:00.098095 kernel: ACPI: Core revision 20210730 Oct 2 21:40:00.098102 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 21:40:00.098108 kernel: pid_max: default: 32768 minimum: 301 Oct 2 21:40:00.098114 kernel: LSM: Security Framework initializing Oct 2 21:40:00.098120 kernel: SELinux: Initializing. Oct 2 21:40:00.098126 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 21:40:00.098133 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 21:40:00.098140 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Oct 2 21:40:00.098146 kernel: Hyper-V: Host Build 10.0.22477.1341-1-0 Oct 2 21:40:00.098152 kernel: rcu: Hierarchical SRCU implementation. Oct 2 21:40:00.098159 kernel: Remapping and enabling EFI services. Oct 2 21:40:00.098165 kernel: smp: Bringing up secondary CPUs ... Oct 2 21:40:00.098171 kernel: Detected PIPT I-cache on CPU1 Oct 2 21:40:00.098177 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Oct 2 21:40:00.098183 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 21:40:00.098190 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 21:40:00.098197 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 21:40:00.098204 kernel: SMP: Total of 2 processors activated. Oct 2 21:40:00.098210 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 21:40:00.098216 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Oct 2 21:40:00.098223 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 21:40:00.098229 kernel: CPU features: detected: CRC32 instructions Oct 2 21:40:00.101332 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 21:40:00.101351 kernel: CPU features: detected: LSE atomic instructions Oct 2 21:40:00.101362 kernel: CPU features: detected: Privileged Access Never Oct 2 21:40:00.101376 kernel: CPU: All CPU(s) started at EL1 Oct 2 21:40:00.101383 kernel: alternatives: patching kernel code Oct 2 21:40:00.101398 kernel: devtmpfs: initialized Oct 2 21:40:00.101406 kernel: KASLR enabled Oct 2 21:40:00.101416 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 21:40:00.101424 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 21:40:00.101431 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 21:40:00.101437 kernel: SMBIOS 3.1.0 present. Oct 2 21:40:00.101448 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/16/2022 Oct 2 21:40:00.101455 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 21:40:00.101464 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 21:40:00.101471 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 21:40:00.101478 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 21:40:00.101484 kernel: audit: initializing netlink subsys (disabled) Oct 2 21:40:00.101491 kernel: audit: type=2000 audit(0.086:1): state=initialized audit_enabled=0 res=1 Oct 2 21:40:00.101498 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 21:40:00.101504 kernel: cpuidle: using governor menu Oct 2 21:40:00.101513 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 21:40:00.101519 kernel: ASID allocator initialised with 32768 entries Oct 2 21:40:00.101526 kernel: ACPI: bus type PCI registered Oct 2 21:40:00.101533 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 21:40:00.101540 kernel: Serial: AMBA PL011 UART driver Oct 2 21:40:00.101547 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 21:40:00.101554 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 21:40:00.101560 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 21:40:00.101567 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 21:40:00.101575 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 21:40:00.101582 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 21:40:00.101589 kernel: ACPI: Added _OSI(Module Device) Oct 2 21:40:00.101596 kernel: ACPI: Added _OSI(Processor Device) Oct 2 21:40:00.101602 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 21:40:00.101609 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 21:40:00.101615 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 21:40:00.101622 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 21:40:00.101628 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 21:40:00.101637 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 21:40:00.101644 kernel: ACPI: Interpreter enabled Oct 2 21:40:00.101650 kernel: ACPI: Using GIC for interrupt routing Oct 2 21:40:00.101657 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Oct 2 21:40:00.101664 kernel: printk: console [ttyAMA0] enabled Oct 2 21:40:00.101670 kernel: printk: bootconsole [pl11] disabled Oct 2 21:40:00.101677 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Oct 2 21:40:00.101683 kernel: iommu: Default domain type: Translated Oct 2 21:40:00.101690 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 21:40:00.101698 kernel: vgaarb: loaded Oct 2 21:40:00.101705 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 21:40:00.101712 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 21:40:00.101719 kernel: PTP clock support registered Oct 2 21:40:00.101725 kernel: Registered efivars operations Oct 2 21:40:00.101732 kernel: No ACPI PMU IRQ for CPU0 Oct 2 21:40:00.101738 kernel: No ACPI PMU IRQ for CPU1 Oct 2 21:40:00.101745 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 21:40:00.101752 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 21:40:00.101760 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 21:40:00.101767 kernel: pnp: PnP ACPI init Oct 2 21:40:00.101773 kernel: pnp: PnP ACPI: found 0 devices Oct 2 21:40:00.101780 kernel: NET: Registered PF_INET protocol family Oct 2 21:40:00.101787 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 21:40:00.101794 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 21:40:00.101801 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 21:40:00.101808 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 21:40:00.101814 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 21:40:00.101823 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 21:40:00.101830 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 21:40:00.101836 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 21:40:00.101843 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 21:40:00.101850 kernel: PCI: CLS 0 bytes, default 64 Oct 2 21:40:00.101857 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Oct 2 21:40:00.101863 kernel: kvm [1]: HYP mode not available Oct 2 21:40:00.101870 kernel: Initialise system trusted keyrings Oct 2 21:40:00.101877 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 21:40:00.101884 kernel: Key type asymmetric registered Oct 2 21:40:00.101891 kernel: Asymmetric key parser 'x509' registered Oct 2 21:40:00.101898 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 21:40:00.101904 kernel: io scheduler mq-deadline registered Oct 2 21:40:00.101911 kernel: io scheduler kyber registered Oct 2 21:40:00.101918 kernel: io scheduler bfq registered Oct 2 21:40:00.101924 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 21:40:00.101931 kernel: thunder_xcv, ver 1.0 Oct 2 21:40:00.101937 kernel: thunder_bgx, ver 1.0 Oct 2 21:40:00.101945 kernel: nicpf, ver 1.0 Oct 2 21:40:00.101952 kernel: nicvf, ver 1.0 Oct 2 21:40:00.102153 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 21:40:00.102216 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T21:39:59 UTC (1696282799) Oct 2 21:40:00.102225 kernel: efifb: probing for efifb Oct 2 21:40:00.102233 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 21:40:00.102262 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 21:40:00.102269 kernel: efifb: scrolling: redraw Oct 2 21:40:00.102279 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 21:40:00.102286 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 21:40:00.102292 kernel: fb0: EFI VGA frame buffer device Oct 2 21:40:00.102299 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Oct 2 21:40:00.102306 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 21:40:00.102312 kernel: NET: Registered PF_INET6 protocol family Oct 2 21:40:00.102319 kernel: Segment Routing with IPv6 Oct 2 21:40:00.102326 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 21:40:00.102332 kernel: NET: Registered PF_PACKET protocol family Oct 2 21:40:00.102340 kernel: Key type dns_resolver registered Oct 2 21:40:00.102347 kernel: registered taskstats version 1 Oct 2 21:40:00.102354 kernel: Loading compiled-in X.509 certificates Oct 2 21:40:00.102360 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 21:40:00.102367 kernel: Key type .fscrypt registered Oct 2 21:40:00.102374 kernel: Key type fscrypt-provisioning registered Oct 2 21:40:00.102381 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 21:40:00.102387 kernel: ima: Allocated hash algorithm: sha1 Oct 2 21:40:00.102394 kernel: ima: No architecture policies found Oct 2 21:40:00.102402 kernel: Freeing unused kernel memory: 34560K Oct 2 21:40:00.102408 kernel: Run /init as init process Oct 2 21:40:00.102415 kernel: with arguments: Oct 2 21:40:00.102422 kernel: /init Oct 2 21:40:00.102428 kernel: with environment: Oct 2 21:40:00.102435 kernel: HOME=/ Oct 2 21:40:00.102441 kernel: TERM=linux Oct 2 21:40:00.102448 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 21:40:00.102457 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 21:40:00.102467 systemd[1]: Detected virtualization microsoft. Oct 2 21:40:00.102475 systemd[1]: Detected architecture arm64. Oct 2 21:40:00.102482 systemd[1]: Running in initrd. Oct 2 21:40:00.102488 systemd[1]: No hostname configured, using default hostname. Oct 2 21:40:00.102495 systemd[1]: Hostname set to . Oct 2 21:40:00.102503 systemd[1]: Initializing machine ID from random generator. Oct 2 21:40:00.102510 systemd[1]: Queued start job for default target initrd.target. Oct 2 21:40:00.102518 systemd[1]: Started systemd-ask-password-console.path. Oct 2 21:40:00.102525 systemd[1]: Reached target cryptsetup.target. Oct 2 21:40:00.102532 systemd[1]: Reached target paths.target. Oct 2 21:40:00.102539 systemd[1]: Reached target slices.target. Oct 2 21:40:00.102547 systemd[1]: Reached target swap.target. Oct 2 21:40:00.102553 systemd[1]: Reached target timers.target. Oct 2 21:40:00.102561 systemd[1]: Listening on iscsid.socket. Oct 2 21:40:00.102568 systemd[1]: Listening on iscsiuio.socket. Oct 2 21:40:00.102576 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 21:40:00.102583 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 21:40:00.102591 systemd[1]: Listening on systemd-journald.socket. Oct 2 21:40:00.102598 systemd[1]: Listening on systemd-networkd.socket. Oct 2 21:40:00.102605 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 21:40:00.102612 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 21:40:00.102619 systemd[1]: Reached target sockets.target. Oct 2 21:40:00.102626 systemd[1]: Starting kmod-static-nodes.service... Oct 2 21:40:00.102633 systemd[1]: Finished network-cleanup.service. Oct 2 21:40:00.102641 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 21:40:00.102649 systemd[1]: Starting systemd-journald.service... Oct 2 21:40:00.102656 systemd[1]: Starting systemd-modules-load.service... Oct 2 21:40:00.102663 systemd[1]: Starting systemd-resolved.service... Oct 2 21:40:00.102670 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 21:40:00.102682 systemd-journald[276]: Journal started Oct 2 21:40:00.102729 systemd-journald[276]: Runtime Journal (/run/log/journal/c50e9dbc9c0246bf92cde39ba42b7ce2) is 8.0M, max 78.6M, 70.6M free. Oct 2 21:40:00.078205 systemd-modules-load[277]: Inserted module 'overlay' Oct 2 21:40:00.134796 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 21:40:00.134816 kernel: Bridge firewalling registered Oct 2 21:40:00.134831 systemd[1]: Started systemd-journald.service. Oct 2 21:40:00.122129 systemd-resolved[278]: Positive Trust Anchors: Oct 2 21:40:00.122137 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 21:40:00.122165 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 21:40:00.229478 kernel: SCSI subsystem initialized Oct 2 21:40:00.229500 kernel: audit: type=1130 audit(1696282800.188:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.229511 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 21:40:00.229520 kernel: device-mapper: uevent: version 1.0.3 Oct 2 21:40:00.229528 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 21:40:00.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.123091 systemd-modules-load[277]: Inserted module 'br_netfilter' Oct 2 21:40:00.257293 kernel: audit: type=1130 audit(1696282800.233:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.125142 systemd-resolved[278]: Defaulting to hostname 'linux'. Oct 2 21:40:00.205738 systemd[1]: Started systemd-resolved.service. Oct 2 21:40:00.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.232090 systemd-modules-load[277]: Inserted module 'dm_multipath' Oct 2 21:40:00.310084 kernel: audit: type=1130 audit(1696282800.257:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.310106 kernel: audit: type=1130 audit(1696282800.281:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.233682 systemd[1]: Finished kmod-static-nodes.service. Oct 2 21:40:00.334094 kernel: audit: type=1130 audit(1696282800.303:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.257766 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 21:40:00.358656 kernel: audit: type=1130 audit(1696282800.328:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.281763 systemd[1]: Finished systemd-modules-load.service. Oct 2 21:40:00.303931 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 21:40:00.329173 systemd[1]: Reached target nss-lookup.target. Oct 2 21:40:00.353674 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 21:40:00.373913 systemd[1]: Starting systemd-sysctl.service... Oct 2 21:40:00.393585 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 21:40:00.414799 systemd[1]: Finished systemd-sysctl.service. Oct 2 21:40:00.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.439877 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 21:40:00.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.444668 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 21:40:00.487700 kernel: audit: type=1130 audit(1696282800.419:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.487723 kernel: audit: type=1130 audit(1696282800.444:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.487736 kernel: audit: type=1130 audit(1696282800.468:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.487934 systemd[1]: Starting dracut-cmdline.service... Oct 2 21:40:00.504899 dracut-cmdline[299]: dracut-dracut-053 Oct 2 21:40:00.510399 dracut-cmdline[299]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 21:40:00.642257 kernel: Loading iSCSI transport class v2.0-870. Oct 2 21:40:00.654257 kernel: iscsi: registered transport (tcp) Oct 2 21:40:00.674359 kernel: iscsi: registered transport (qla4xxx) Oct 2 21:40:00.674380 kernel: QLogic iSCSI HBA Driver Oct 2 21:40:00.762447 systemd[1]: Finished dracut-cmdline.service. Oct 2 21:40:00.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:00.767583 systemd[1]: Starting dracut-pre-udev.service... Oct 2 21:40:00.833256 kernel: raid6: neonx8 gen() 13807 MB/s Oct 2 21:40:00.853259 kernel: raid6: neonx8 xor() 10824 MB/s Oct 2 21:40:00.873250 kernel: raid6: neonx4 gen() 13543 MB/s Oct 2 21:40:00.894248 kernel: raid6: neonx4 xor() 11232 MB/s Oct 2 21:40:00.914248 kernel: raid6: neonx2 gen() 12934 MB/s Oct 2 21:40:00.934248 kernel: raid6: neonx2 xor() 10215 MB/s Oct 2 21:40:00.955249 kernel: raid6: neonx1 gen() 10476 MB/s Oct 2 21:40:00.975247 kernel: raid6: neonx1 xor() 8772 MB/s Oct 2 21:40:01.011244 kernel: raid6: int64x8 gen() 6275 MB/s Oct 2 21:40:01.022266 kernel: raid6: int64x8 xor() 3545 MB/s Oct 2 21:40:01.036250 kernel: raid6: int64x4 gen() 7211 MB/s Oct 2 21:40:01.056248 kernel: raid6: int64x4 xor() 3856 MB/s Oct 2 21:40:01.077248 kernel: raid6: int64x2 gen() 6153 MB/s Oct 2 21:40:01.097248 kernel: raid6: int64x2 xor() 3320 MB/s Oct 2 21:40:01.117247 kernel: raid6: int64x1 gen() 5049 MB/s Oct 2 21:40:01.142741 kernel: raid6: int64x1 xor() 2645 MB/s Oct 2 21:40:01.142797 kernel: raid6: using algorithm neonx8 gen() 13807 MB/s Oct 2 21:40:01.142806 kernel: raid6: .... xor() 10824 MB/s, rmw enabled Oct 2 21:40:01.146822 kernel: raid6: using neon recovery algorithm Oct 2 21:40:01.167901 kernel: xor: measuring software checksum speed Oct 2 21:40:01.167952 kernel: 8regs : 17289 MB/sec Oct 2 21:40:01.172253 kernel: 32regs : 20760 MB/sec Oct 2 21:40:01.181765 kernel: arm64_neon : 27797 MB/sec Oct 2 21:40:01.181777 kernel: xor: using function: arm64_neon (27797 MB/sec) Oct 2 21:40:01.237252 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 21:40:01.255008 systemd[1]: Finished dracut-pre-udev.service. Oct 2 21:40:01.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:01.263000 audit: BPF prog-id=7 op=LOAD Oct 2 21:40:01.263000 audit: BPF prog-id=8 op=LOAD Oct 2 21:40:01.263981 systemd[1]: Starting systemd-udevd.service... Oct 2 21:40:01.284169 systemd-udevd[475]: Using default interface naming scheme 'v252'. Oct 2 21:40:01.290768 systemd[1]: Started systemd-udevd.service. Oct 2 21:40:01.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:01.302274 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 21:40:01.331960 dracut-pre-trigger[495]: rd.md=0: removing MD RAID activation Oct 2 21:40:01.383993 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 21:40:01.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:01.389429 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 21:40:01.432009 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 21:40:01.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:01.497266 kernel: hv_vmbus: Vmbus version:5.3 Oct 2 21:40:01.510255 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 21:40:01.523254 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 21:40:01.523318 kernel: scsi host0: storvsc_host_t Oct 2 21:40:01.523456 kernel: scsi host1: storvsc_host_t Oct 2 21:40:01.530259 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 21:40:01.541629 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 21:40:01.541679 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 21:40:01.541719 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 21:40:01.554489 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input0 Oct 2 21:40:01.565537 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 21:40:01.565733 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input1 Oct 2 21:40:01.602717 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 21:40:01.602965 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 21:40:01.610166 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 21:40:01.610351 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 21:40:01.615623 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 21:40:01.619992 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 21:40:01.620250 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 21:40:01.628250 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 21:40:01.634249 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 21:40:01.634281 kernel: hv_netvsc 0022487b-60d5-0022-487b-60d50022487b eth0: VF slot 1 added Oct 2 21:40:01.646259 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 21:40:01.654268 kernel: hv_vmbus: registering driver hv_pci Oct 2 21:40:01.654324 kernel: hv_pci 745667fe-4545-4468-9d29-a6b7ca28e4f9: PCI VMBus probing: Using version 0x10004 Oct 2 21:40:01.677712 kernel: hv_pci 745667fe-4545-4468-9d29-a6b7ca28e4f9: PCI host bridge to bus 4545:00 Oct 2 21:40:01.677917 kernel: pci_bus 4545:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Oct 2 21:40:01.678018 kernel: pci_bus 4545:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 21:40:01.695466 kernel: pci 4545:00:02.0: [15b3:1018] type 00 class 0x020000 Oct 2 21:40:01.705861 kernel: pci 4545:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 21:40:01.736345 kernel: pci 4545:00:02.0: enabling Extended Tags Oct 2 21:40:01.755256 kernel: pci 4545:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 4545:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Oct 2 21:40:01.755437 kernel: pci_bus 4545:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 21:40:01.767265 kernel: pci 4545:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 21:40:01.808264 kernel: mlx5_core 4545:00:02.0: firmware version: 16.30.1278 Oct 2 21:40:01.941921 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 21:40:01.968271 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (545) Oct 2 21:40:01.982296 kernel: mlx5_core 4545:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Oct 2 21:40:01.990037 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 21:40:02.056047 kernel: hv_netvsc 0022487b-60d5-0022-487b-60d50022487b eth0: VF registering: eth1 Oct 2 21:40:02.056247 kernel: mlx5_core 4545:00:02.0 eth1: joined to eth0 Oct 2 21:40:02.069280 kernel: mlx5_core 4545:00:02.0 enP17733s1: renamed from eth1 Oct 2 21:40:02.111799 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 21:40:02.130985 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 21:40:02.136698 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 21:40:02.148720 systemd[1]: Starting disk-uuid.service... Oct 2 21:40:02.175391 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 21:40:02.184259 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 21:40:03.193607 disk-uuid[603]: The operation has completed successfully. Oct 2 21:40:03.198749 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 21:40:03.265659 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 21:40:03.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:03.269000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:03.265756 systemd[1]: Finished disk-uuid.service. Oct 2 21:40:03.275090 systemd[1]: Starting verity-setup.service... Oct 2 21:40:03.317257 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 21:40:03.499275 systemd[1]: Found device dev-mapper-usr.device. Oct 2 21:40:03.505445 systemd[1]: Mounting sysusr-usr.mount... Oct 2 21:40:03.522381 systemd[1]: Finished verity-setup.service. Oct 2 21:40:03.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:03.572275 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 21:40:03.572880 systemd[1]: Mounted sysusr-usr.mount. Oct 2 21:40:03.580942 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 21:40:03.581786 systemd[1]: Starting ignition-setup.service... Oct 2 21:40:03.595333 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 21:40:03.623844 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 21:40:03.623908 kernel: BTRFS info (device sda6): using free space tree Oct 2 21:40:03.630272 kernel: BTRFS info (device sda6): has skinny extents Oct 2 21:40:03.706869 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 21:40:03.785019 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 21:40:03.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:03.794000 audit: BPF prog-id=9 op=LOAD Oct 2 21:40:03.796043 systemd[1]: Starting systemd-networkd.service... Oct 2 21:40:03.811499 systemd[1]: Finished ignition-setup.service. Oct 2 21:40:03.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:03.821159 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 21:40:03.834474 systemd-networkd[848]: lo: Link UP Oct 2 21:40:03.834486 systemd-networkd[848]: lo: Gained carrier Oct 2 21:40:03.835207 systemd-networkd[848]: Enumeration completed Oct 2 21:40:03.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:03.837769 systemd[1]: Started systemd-networkd.service. Oct 2 21:40:03.838286 systemd-networkd[848]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 21:40:03.846093 systemd[1]: Reached target network.target. Oct 2 21:40:03.854206 systemd[1]: Starting iscsiuio.service... Oct 2 21:40:03.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:03.870178 systemd[1]: Started iscsiuio.service. Oct 2 21:40:03.878444 systemd[1]: Starting iscsid.service... Oct 2 21:40:03.888401 iscsid[855]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 21:40:03.888401 iscsid[855]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 21:40:03.888401 iscsid[855]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 21:40:03.888401 iscsid[855]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 21:40:03.888401 iscsid[855]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 21:40:03.888401 iscsid[855]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 21:40:03.888401 iscsid[855]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 21:40:03.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:03.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:03.900030 systemd[1]: Started iscsid.service. Oct 2 21:40:03.905202 systemd[1]: Starting dracut-initqueue.service... Oct 2 21:40:03.928298 systemd[1]: Finished dracut-initqueue.service. Oct 2 21:40:03.933283 systemd[1]: Reached target remote-fs-pre.target. Oct 2 21:40:04.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:03.950934 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 21:40:04.053837 kernel: kauditd_printk_skb: 17 callbacks suppressed Oct 2 21:40:04.053863 kernel: audit: type=1130 audit(1696282804.017:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:04.053879 kernel: mlx5_core 4545:00:02.0 enP17733s1: Link up Oct 2 21:40:03.960906 systemd[1]: Reached target remote-fs.target. Oct 2 21:40:03.971854 systemd[1]: Starting dracut-pre-mount.service... Oct 2 21:40:04.008346 systemd[1]: Finished dracut-pre-mount.service. Oct 2 21:40:04.101941 kernel: hv_netvsc 0022487b-60d5-0022-487b-60d50022487b eth0: Data path switched to VF: enP17733s1 Oct 2 21:40:04.102206 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 21:40:04.102617 systemd-networkd[848]: enP17733s1: Link UP Oct 2 21:40:04.102699 systemd-networkd[848]: eth0: Link UP Oct 2 21:40:04.102815 systemd-networkd[848]: eth0: Gained carrier Oct 2 21:40:04.115467 systemd-networkd[848]: enP17733s1: Gained carrier Oct 2 21:40:04.131297 systemd-networkd[848]: eth0: DHCPv4 address 10.200.20.15/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 21:40:05.949127 ignition[850]: Ignition 2.14.0 Oct 2 21:40:05.951271 ignition[850]: Stage: fetch-offline Oct 2 21:40:05.951365 ignition[850]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:40:05.951386 ignition[850]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:40:05.970407 systemd-networkd[848]: eth0: Gained IPv6LL Oct 2 21:40:06.013312 ignition[850]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:40:06.013445 ignition[850]: parsed url from cmdline: "" Oct 2 21:40:06.014466 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 21:40:06.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:06.013448 ignition[850]: no config URL provided Oct 2 21:40:06.054024 kernel: audit: type=1130 audit(1696282806.024:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:06.025645 systemd[1]: Starting ignition-fetch.service... Oct 2 21:40:06.013453 ignition[850]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 21:40:06.013461 ignition[850]: no config at "/usr/lib/ignition/user.ign" Oct 2 21:40:06.013467 ignition[850]: failed to fetch config: resource requires networking Oct 2 21:40:06.013567 ignition[850]: Ignition finished successfully Oct 2 21:40:06.058679 ignition[875]: Ignition 2.14.0 Oct 2 21:40:06.058686 ignition[875]: Stage: fetch Oct 2 21:40:06.058801 ignition[875]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:40:06.058820 ignition[875]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:40:06.062388 ignition[875]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:40:06.062604 ignition[875]: parsed url from cmdline: "" Oct 2 21:40:06.062608 ignition[875]: no config URL provided Oct 2 21:40:06.062617 ignition[875]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 21:40:06.062625 ignition[875]: no config at "/usr/lib/ignition/user.ign" Oct 2 21:40:06.062656 ignition[875]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 21:40:06.079053 ignition[875]: GET result: OK Oct 2 21:40:06.079079 ignition[875]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 21:40:06.124435 ignition[875]: opening config device: "/dev/sr0" Oct 2 21:40:06.124872 ignition[875]: getting drive status for "/dev/sr0" Oct 2 21:40:06.124951 ignition[875]: drive status: OK Oct 2 21:40:06.124981 ignition[875]: mounting config device Oct 2 21:40:06.125044 ignition[875]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure2929837328" Oct 2 21:40:06.148255 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 21:40:06.148369 ignition[875]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure2929837328" Oct 2 21:40:06.149440 systemd[1]: tmp-ignition\x2dazure2929837328.mount: Deactivated successfully. Oct 2 21:40:06.148379 ignition[875]: checking for config drive Oct 2 21:40:06.148751 ignition[875]: reading config Oct 2 21:40:06.149116 ignition[875]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure2929837328" Oct 2 21:40:06.149211 ignition[875]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure2929837328" Oct 2 21:40:06.149224 ignition[875]: config has been read from custom data Oct 2 21:40:06.149318 ignition[875]: parsing config with SHA512: 1c1e876c8dcbc1882200b0f816368e429b529458a7d5aedbfe0695f74e642f6648c957f3c6c7fa8612ca4c98df3e9833cfd65ffed572ad09e93455aa851cdcc5 Oct 2 21:40:06.189965 unknown[875]: fetched base config from "system" Oct 2 21:40:06.189978 unknown[875]: fetched base config from "system" Oct 2 21:40:06.199000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:06.190563 ignition[875]: fetch: fetch complete Oct 2 21:40:06.231679 kernel: audit: type=1130 audit(1696282806.199:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:06.189985 unknown[875]: fetched user config from "azure" Oct 2 21:40:06.190569 ignition[875]: fetch: fetch passed Oct 2 21:40:06.195507 systemd[1]: Finished ignition-fetch.service. Oct 2 21:40:06.190614 ignition[875]: Ignition finished successfully Oct 2 21:40:06.200914 systemd[1]: Starting ignition-kargs.service... Oct 2 21:40:06.247820 ignition[883]: Ignition 2.14.0 Oct 2 21:40:06.247826 ignition[883]: Stage: kargs Oct 2 21:40:06.247937 ignition[883]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:40:06.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:06.269484 systemd[1]: Finished ignition-kargs.service. Oct 2 21:40:06.294797 kernel: audit: type=1130 audit(1696282806.273:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:06.247964 ignition[883]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:40:06.265117 ignition[883]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:40:06.266403 ignition[883]: kargs: kargs passed Oct 2 21:40:06.266453 ignition[883]: Ignition finished successfully Oct 2 21:40:06.307954 systemd[1]: Starting ignition-disks.service... Oct 2 21:40:06.324284 ignition[889]: Ignition 2.14.0 Oct 2 21:40:06.324294 ignition[889]: Stage: disks Oct 2 21:40:06.324408 ignition[889]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:40:06.371521 kernel: audit: type=1130 audit(1696282806.344:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:06.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:06.340281 systemd[1]: Finished ignition-disks.service. Oct 2 21:40:06.324430 ignition[889]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:40:06.344946 systemd[1]: Reached target initrd-root-device.target. Oct 2 21:40:06.332454 ignition[889]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:40:06.375657 systemd[1]: Reached target local-fs-pre.target. Oct 2 21:40:06.333683 ignition[889]: disks: disks passed Oct 2 21:40:06.380329 systemd[1]: Reached target local-fs.target. Oct 2 21:40:06.333736 ignition[889]: Ignition finished successfully Oct 2 21:40:06.388844 systemd[1]: Reached target sysinit.target. Oct 2 21:40:06.398668 systemd[1]: Reached target basic.target. Oct 2 21:40:06.407475 systemd[1]: Starting systemd-fsck-root.service... Oct 2 21:40:06.478810 systemd-fsck[897]: ROOT: clean, 603/7326000 files, 481067/7359488 blocks Oct 2 21:40:06.488989 systemd[1]: Finished systemd-fsck-root.service. Oct 2 21:40:06.493000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:06.520065 kernel: audit: type=1130 audit(1696282806.493:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:06.514515 systemd[1]: Mounting sysroot.mount... Oct 2 21:40:06.543853 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 21:40:06.540161 systemd[1]: Mounted sysroot.mount. Oct 2 21:40:06.544433 systemd[1]: Reached target initrd-root-fs.target. Oct 2 21:40:06.575317 systemd[1]: Mounting sysroot-usr.mount... Oct 2 21:40:06.580255 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 21:40:06.584935 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 21:40:06.584973 systemd[1]: Reached target ignition-diskful.target. Oct 2 21:40:06.591658 systemd[1]: Mounted sysroot-usr.mount. Oct 2 21:40:06.621221 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 21:40:06.629756 systemd[1]: Starting initrd-setup-root.service... Oct 2 21:40:06.666549 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (907) Oct 2 21:40:06.666571 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 21:40:06.667399 initrd-setup-root[912]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 21:40:06.687491 kernel: BTRFS info (device sda6): using free space tree Oct 2 21:40:06.687514 kernel: BTRFS info (device sda6): has skinny extents Oct 2 21:40:06.691044 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 21:40:06.706647 initrd-setup-root[938]: cut: /sysroot/etc/group: No such file or directory Oct 2 21:40:06.722039 initrd-setup-root[946]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 21:40:06.735128 initrd-setup-root[954]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 21:40:07.322875 systemd[1]: Finished initrd-setup-root.service. Oct 2 21:40:07.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:07.328852 systemd[1]: Starting ignition-mount.service... Oct 2 21:40:07.366005 kernel: audit: type=1130 audit(1696282807.327:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:07.352228 systemd[1]: Starting sysroot-boot.service... Oct 2 21:40:07.360931 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 21:40:07.361047 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 21:40:07.398399 ignition[974]: INFO : Ignition 2.14.0 Oct 2 21:40:07.398399 ignition[974]: INFO : Stage: mount Oct 2 21:40:07.398399 ignition[974]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:40:07.398399 ignition[974]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:40:07.398399 ignition[974]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:40:07.460966 kernel: audit: type=1130 audit(1696282807.422:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:07.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:07.417634 systemd[1]: Finished ignition-mount.service. Oct 2 21:40:07.466408 ignition[974]: INFO : mount: mount passed Oct 2 21:40:07.466408 ignition[974]: INFO : Ignition finished successfully Oct 2 21:40:07.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:07.466801 systemd[1]: Finished sysroot-boot.service. Oct 2 21:40:07.501790 coreos-metadata[906]: Oct 02 21:40:07.482 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 21:40:07.501790 coreos-metadata[906]: Oct 02 21:40:07.485 INFO Fetch successful Oct 2 21:40:07.516673 kernel: audit: type=1130 audit(1696282807.474:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:07.523050 coreos-metadata[906]: Oct 02 21:40:07.523 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 21:40:07.544844 coreos-metadata[906]: Oct 02 21:40:07.544 INFO Fetch successful Oct 2 21:40:07.550765 coreos-metadata[906]: Oct 02 21:40:07.546 INFO wrote hostname ci-3510.3.0-a-21920721f7 to /sysroot/etc/hostname Oct 2 21:40:07.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:07.548524 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 21:40:07.591692 kernel: audit: type=1130 audit(1696282807.555:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:07.556673 systemd[1]: Starting ignition-files.service... Oct 2 21:40:07.589827 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 21:40:07.614266 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (985) Oct 2 21:40:07.627749 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 21:40:07.627766 kernel: BTRFS info (device sda6): using free space tree Oct 2 21:40:07.627775 kernel: BTRFS info (device sda6): has skinny extents Oct 2 21:40:07.637608 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 21:40:07.658216 ignition[1004]: INFO : Ignition 2.14.0 Oct 2 21:40:07.658216 ignition[1004]: INFO : Stage: files Oct 2 21:40:07.669872 ignition[1004]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:40:07.669872 ignition[1004]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:40:07.669872 ignition[1004]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:40:07.669872 ignition[1004]: DEBUG : files: compiled without relabeling support, skipping Oct 2 21:40:07.707285 ignition[1004]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 21:40:07.707285 ignition[1004]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 21:40:07.748454 ignition[1004]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 21:40:07.759023 ignition[1004]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 21:40:07.759023 ignition[1004]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 21:40:07.758317 unknown[1004]: wrote ssh authorized keys file for user: core Oct 2 21:40:07.781389 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 21:40:07.781389 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-arm64-v1.1.1.tgz: attempt #1 Oct 2 21:40:08.178854 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 21:40:08.638935 ignition[1004]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 6b5df61a53601926e4b5a9174828123d555f592165439f541bc117c68781f41c8bd30dccd52367e406d104df849bcbcfb72d9c4bafda4b045c59ce95d0ca0742 Oct 2 21:40:08.655664 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 21:40:08.655664 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 21:40:08.655664 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-arm64.tar.gz: attempt #1 Oct 2 21:40:09.008337 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 21:40:09.342657 ignition[1004]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: 4c7e4541123cbd6f1d6fec1f827395cd58d65716c0998de790f965485738b6d6257c0dc46fd7f66403166c299f6d5bf9ff30b6e1ff9afbb071f17005e834518c Oct 2 21:40:09.342657 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 21:40:09.371783 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 21:40:09.371783 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubeadm: attempt #1 Oct 2 21:40:09.471962 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 21:40:10.435208 ignition[1004]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 46c9f489062bdb84574703f7339d140d7e42c9c71b367cd860071108a3c1d38fabda2ef69f9c0ff88f7c80e88d38f96ab2248d4c9a6c9c60b0a4c20fd640d0db Oct 2 21:40:10.450900 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 21:40:10.450900 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 21:40:10.450900 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubelet: attempt #1 Oct 2 21:40:10.634029 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 21:40:12.715082 ignition[1004]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 0e4ee1f23bf768c49d09beb13a6b5fad6efc8e3e685e7c5610188763e3af55923fb46158b5e76973a0f9a055f9b30d525b467c53415f965536adc2f04d9cf18d Oct 2 21:40:12.731249 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 21:40:12.731249 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 21:40:12.731249 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubectl: attempt #1 Oct 2 21:40:12.781939 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 21:40:13.118638 ignition[1004]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 3672fda0beebbbd636a2088f427463cbad32683ea4fbb1df61650552e63846b6a47db803ccb70c3db0a8f24746a23a5632bdc15a3fb78f4f7d833e7f86763c2a Oct 2 21:40:13.134762 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 21:40:13.134762 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 21:40:13.134762 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 21:40:13.134762 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 21:40:13.134762 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 21:40:13.471717 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 21:40:13.836267 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 21:40:13.846400 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 21:40:13.973614 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 21:40:13.973614 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 21:40:14.009014 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 21:40:14.009014 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 21:40:14.009014 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 21:40:14.009014 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1335217975" Oct 2 21:40:14.009014 ignition[1004]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1335217975": device or resource busy Oct 2 21:40:14.009014 ignition[1004]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1335217975", trying btrfs: device or resource busy Oct 2 21:40:14.009014 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1335217975" Oct 2 21:40:14.091838 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (1006) Oct 2 21:40:14.023260 systemd[1]: mnt-oem1335217975.mount: Deactivated successfully. Oct 2 21:40:14.097192 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1335217975" Oct 2 21:40:14.097192 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem1335217975" Oct 2 21:40:14.097192 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem1335217975" Oct 2 21:40:14.097192 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 21:40:14.097192 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 21:40:14.097192 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 21:40:14.097192 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2178977279" Oct 2 21:40:14.097192 ignition[1004]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2178977279": device or resource busy Oct 2 21:40:14.097192 ignition[1004]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2178977279", trying btrfs: device or resource busy Oct 2 21:40:14.097192 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2178977279" Oct 2 21:40:14.097192 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2178977279" Oct 2 21:40:14.097192 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem2178977279" Oct 2 21:40:14.097192 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem2178977279" Oct 2 21:40:14.097192 ignition[1004]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 21:40:14.097192 ignition[1004]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 21:40:14.097192 ignition[1004]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 21:40:14.335986 kernel: audit: type=1130 audit(1696282814.102:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.336012 kernel: audit: type=1130 audit(1696282814.168:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.336022 kernel: audit: type=1131 audit(1696282814.168:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.168000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.092524 systemd[1]: Finished ignition-files.service. Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(18): [started] processing unit "prepare-cni-plugins.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(18): op(19): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(18): op(19): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(18): [finished] processing unit "prepare-cni-plugins.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(1a): [started] setting preset to enabled for "nvidia.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(1a): [finished] setting preset to enabled for "nvidia.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-critools.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(1d): [started] setting preset to enabled for "waagent.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: op(1d): [finished] setting preset to enabled for "waagent.service" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 21:40:14.340130 ignition[1004]: INFO : files: files passed Oct 2 21:40:14.634801 kernel: audit: type=1130 audit(1696282814.367:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.634830 kernel: audit: type=1130 audit(1696282814.476:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.634848 kernel: audit: type=1131 audit(1696282814.500:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.634859 kernel: audit: type=1130 audit(1696282814.613:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.367000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.500000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.105410 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 21:40:14.643646 ignition[1004]: INFO : Ignition finished successfully Oct 2 21:40:14.137430 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 21:40:14.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.652000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.692144 initrd-setup-root-after-ignition[1029]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 21:40:14.707316 kernel: audit: type=1130 audit(1696282814.652:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.707338 kernel: audit: type=1131 audit(1696282814.652:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.139478 systemd[1]: Starting ignition-quench.service... Oct 2 21:40:14.163877 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 21:40:14.163982 systemd[1]: Finished ignition-quench.service. Oct 2 21:40:14.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.359301 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 21:40:14.397491 systemd[1]: Reached target ignition-complete.target. Oct 2 21:40:14.764270 kernel: audit: type=1131 audit(1696282814.730:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.420679 systemd[1]: Starting initrd-parse-etc.service... Oct 2 21:40:14.465357 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 21:40:14.465461 systemd[1]: Finished initrd-parse-etc.service. Oct 2 21:40:14.501404 systemd[1]: Reached target initrd-fs.target. Oct 2 21:40:14.529098 systemd[1]: Reached target initrd.target. Oct 2 21:40:14.541181 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 21:40:14.548996 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 21:40:14.599416 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 21:40:14.614636 systemd[1]: Starting initrd-cleanup.service... Oct 2 21:40:14.647558 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 21:40:14.647664 systemd[1]: Finished initrd-cleanup.service. Oct 2 21:40:14.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.652914 systemd[1]: Stopped target nss-lookup.target. Oct 2 21:40:14.699443 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 21:40:14.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.712232 systemd[1]: Stopped target timers.target. Oct 2 21:40:14.887000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.720728 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 21:40:14.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.720780 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 21:40:14.906000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.750960 systemd[1]: Stopped target initrd.target. Oct 2 21:40:14.929000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.934812 iscsid[855]: iscsid shutting down. Oct 2 21:40:14.760083 systemd[1]: Stopped target basic.target. Oct 2 21:40:14.947023 ignition[1042]: INFO : Ignition 2.14.0 Oct 2 21:40:14.947023 ignition[1042]: INFO : Stage: umount Oct 2 21:40:14.947023 ignition[1042]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 21:40:14.947023 ignition[1042]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 21:40:14.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.970000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.988000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.768087 systemd[1]: Stopped target ignition-complete.target. Oct 2 21:40:15.002776 ignition[1042]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 21:40:15.002776 ignition[1042]: INFO : umount: umount passed Oct 2 21:40:15.002776 ignition[1042]: INFO : Ignition finished successfully Oct 2 21:40:15.002000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:15.007000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:15.020000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.776966 systemd[1]: Stopped target ignition-diskful.target. Oct 2 21:40:14.786408 systemd[1]: Stopped target initrd-root-device.target. Oct 2 21:40:14.796139 systemd[1]: Stopped target remote-fs.target. Oct 2 21:40:14.804441 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 21:40:14.812646 systemd[1]: Stopped target sysinit.target. Oct 2 21:40:15.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.823547 systemd[1]: Stopped target local-fs.target. Oct 2 21:40:14.831407 systemd[1]: Stopped target local-fs-pre.target. Oct 2 21:40:15.086000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.840445 systemd[1]: Stopped target swap.target. Oct 2 21:40:15.094000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.849024 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 21:40:14.849094 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 21:40:14.860241 systemd[1]: Stopped target cryptsetup.target. Oct 2 21:40:15.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.869377 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 21:40:14.869429 systemd[1]: Stopped dracut-initqueue.service. Oct 2 21:40:14.878156 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 21:40:15.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.878196 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 21:40:14.888270 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 21:40:15.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.888312 systemd[1]: Stopped ignition-files.service. Oct 2 21:40:15.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.896146 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 21:40:15.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.896195 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 21:40:14.907310 systemd[1]: Stopping ignition-mount.service... Oct 2 21:40:15.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:15.210000 audit: BPF prog-id=6 op=UNLOAD Oct 2 21:40:14.915642 systemd[1]: Stopping iscsid.service... Oct 2 21:40:15.218000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.921639 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 21:40:14.921721 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 21:40:15.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.930925 systemd[1]: Stopping sysroot-boot.service... Oct 2 21:40:15.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.938397 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 21:40:15.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.938468 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 21:40:15.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.947574 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 21:40:15.307563 kernel: hv_netvsc 0022487b-60d5-0022-487b-60d50022487b eth0: Data path switched from VF: enP17733s1 Oct 2 21:40:15.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:15.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:14.947625 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 21:40:14.960293 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 21:40:14.960393 systemd[1]: Stopped iscsid.service. Oct 2 21:40:14.971127 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 21:40:14.971214 systemd[1]: Stopped ignition-mount.service. Oct 2 21:40:14.988473 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 21:40:14.988527 systemd[1]: Stopped ignition-disks.service. Oct 2 21:40:14.993166 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 21:40:14.993207 systemd[1]: Stopped ignition-kargs.service. Oct 2 21:40:15.002633 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 21:40:15.002690 systemd[1]: Stopped ignition-fetch.service. Oct 2 21:40:15.007399 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 21:40:15.007441 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 21:40:15.020455 systemd[1]: Stopped target paths.target. Oct 2 21:40:15.025023 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 21:40:15.034268 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 21:40:15.038802 systemd[1]: Stopped target slices.target. Oct 2 21:40:15.046923 systemd[1]: Stopped target sockets.target. Oct 2 21:40:15.055263 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 21:40:15.399000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:15.055320 systemd[1]: Closed iscsid.socket. Oct 2 21:40:15.063175 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 21:40:15.063221 systemd[1]: Stopped ignition-setup.service. Oct 2 21:40:15.071994 systemd[1]: Stopping iscsiuio.service... Oct 2 21:40:15.080387 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 21:40:15.080853 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 21:40:15.080949 systemd[1]: Stopped iscsiuio.service. Oct 2 21:40:15.086814 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 21:40:15.086889 systemd[1]: Stopped sysroot-boot.service. Oct 2 21:40:15.094903 systemd[1]: Stopped target network.target. Oct 2 21:40:15.102324 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 21:40:15.102375 systemd[1]: Closed iscsiuio.socket. Oct 2 21:40:15.110957 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 21:40:15.473903 systemd-journald[276]: Received SIGTERM from PID 1 (n/a). Oct 2 21:40:15.111004 systemd[1]: Stopped initrd-setup-root.service. Oct 2 21:40:15.119354 systemd[1]: Stopping systemd-networkd.service... Oct 2 21:40:15.126989 systemd-networkd[848]: eth0: DHCPv6 lease lost Oct 2 21:40:15.473000 audit: BPF prog-id=9 op=UNLOAD Oct 2 21:40:15.128548 systemd[1]: Stopping systemd-resolved.service... Oct 2 21:40:15.137881 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 21:40:15.137996 systemd[1]: Stopped systemd-networkd.service. Oct 2 21:40:15.147615 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 21:40:15.147648 systemd[1]: Closed systemd-networkd.socket. Oct 2 21:40:15.158449 systemd[1]: Stopping network-cleanup.service... Oct 2 21:40:15.167846 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 21:40:15.167908 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 21:40:15.173390 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 21:40:15.173435 systemd[1]: Stopped systemd-sysctl.service. Oct 2 21:40:15.186264 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 21:40:15.186308 systemd[1]: Stopped systemd-modules-load.service. Oct 2 21:40:15.191055 systemd[1]: Stopping systemd-udevd.service... Oct 2 21:40:15.201136 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 21:40:15.201654 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 21:40:15.201816 systemd[1]: Stopped systemd-resolved.service. Oct 2 21:40:15.211136 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 21:40:15.211351 systemd[1]: Stopped systemd-udevd.service. Oct 2 21:40:15.220266 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 21:40:15.220318 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 21:40:15.228909 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 21:40:15.228948 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 21:40:15.234194 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 21:40:15.234329 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 21:40:15.244470 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 21:40:15.244524 systemd[1]: Stopped dracut-cmdline.service. Oct 2 21:40:15.253576 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 21:40:15.253633 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 21:40:15.263082 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 21:40:15.273893 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 21:40:15.273956 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 21:40:15.291488 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 21:40:15.291626 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 21:40:15.390953 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 21:40:15.391066 systemd[1]: Stopped network-cleanup.service. Oct 2 21:40:15.399652 systemd[1]: Reached target initrd-switch-root.target. Oct 2 21:40:15.409903 systemd[1]: Starting initrd-switch-root.service... Oct 2 21:40:15.427059 systemd[1]: Switching root. Oct 2 21:40:15.475005 systemd-journald[276]: Journal stopped Oct 2 21:40:23.859342 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 21:40:23.859362 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 21:40:23.859373 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 21:40:23.859383 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 21:40:23.859393 kernel: SELinux: policy capability open_perms=1 Oct 2 21:40:23.859400 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 21:40:23.859409 kernel: SELinux: policy capability always_check_network=0 Oct 2 21:40:23.859417 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 21:40:23.859425 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 21:40:23.859433 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 21:40:23.859442 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 21:40:23.859452 systemd[1]: Successfully loaded SELinux policy in 197.898ms. Oct 2 21:40:23.859462 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.556ms. Oct 2 21:40:23.859473 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 21:40:23.859484 systemd[1]: Detected virtualization microsoft. Oct 2 21:40:23.859492 systemd[1]: Detected architecture arm64. Oct 2 21:40:23.859501 systemd[1]: Detected first boot. Oct 2 21:40:23.859510 systemd[1]: Hostname set to . Oct 2 21:40:23.859519 systemd[1]: Initializing machine ID from random generator. Oct 2 21:40:23.859528 systemd[1]: Populated /etc with preset unit settings. Oct 2 21:40:23.859537 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:40:23.859547 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:40:23.859559 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:40:23.859568 kernel: kauditd_printk_skb: 40 callbacks suppressed Oct 2 21:40:23.859576 kernel: audit: type=1334 audit(1696282823.126:88): prog-id=12 op=LOAD Oct 2 21:40:23.859585 kernel: audit: type=1334 audit(1696282823.126:89): prog-id=3 op=UNLOAD Oct 2 21:40:23.859594 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 21:40:23.859603 kernel: audit: type=1334 audit(1696282823.131:90): prog-id=13 op=LOAD Oct 2 21:40:23.859612 systemd[1]: Stopped initrd-switch-root.service. Oct 2 21:40:23.859622 kernel: audit: type=1334 audit(1696282823.137:91): prog-id=14 op=LOAD Oct 2 21:40:23.859630 kernel: audit: type=1334 audit(1696282823.137:92): prog-id=4 op=UNLOAD Oct 2 21:40:23.859639 kernel: audit: type=1334 audit(1696282823.137:93): prog-id=5 op=UNLOAD Oct 2 21:40:23.859648 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 21:40:23.859657 kernel: audit: type=1131 audit(1696282823.138:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.859666 kernel: audit: type=1334 audit(1696282823.169:95): prog-id=12 op=UNLOAD Oct 2 21:40:23.859676 kernel: audit: type=1130 audit(1696282823.178:96): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.859684 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 21:40:23.859694 kernel: audit: type=1131 audit(1696282823.178:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.859702 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 21:40:23.859712 systemd[1]: Created slice system-getty.slice. Oct 2 21:40:23.859723 systemd[1]: Created slice system-modprobe.slice. Oct 2 21:40:23.859733 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 21:40:23.859742 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 21:40:23.859752 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 21:40:23.859763 systemd[1]: Created slice user.slice. Oct 2 21:40:23.859772 systemd[1]: Started systemd-ask-password-console.path. Oct 2 21:40:23.859781 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 21:40:23.859790 systemd[1]: Set up automount boot.automount. Oct 2 21:40:23.859799 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 21:40:23.859808 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 21:40:23.859818 systemd[1]: Stopped target initrd-fs.target. Oct 2 21:40:23.859827 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 21:40:23.859836 systemd[1]: Reached target integritysetup.target. Oct 2 21:40:23.859846 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 21:40:23.859856 systemd[1]: Reached target remote-fs.target. Oct 2 21:40:23.859865 systemd[1]: Reached target slices.target. Oct 2 21:40:23.859874 systemd[1]: Reached target swap.target. Oct 2 21:40:23.859883 systemd[1]: Reached target torcx.target. Oct 2 21:40:23.859892 systemd[1]: Reached target veritysetup.target. Oct 2 21:40:23.859902 systemd[1]: Listening on systemd-coredump.socket. Oct 2 21:40:23.859911 systemd[1]: Listening on systemd-initctl.socket. Oct 2 21:40:23.859922 systemd[1]: Listening on systemd-networkd.socket. Oct 2 21:40:23.859932 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 21:40:23.859941 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 21:40:23.859951 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 21:40:23.859962 systemd[1]: Mounting dev-hugepages.mount... Oct 2 21:40:23.859971 systemd[1]: Mounting dev-mqueue.mount... Oct 2 21:40:23.859980 systemd[1]: Mounting media.mount... Oct 2 21:40:23.859990 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 21:40:23.859999 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 21:40:23.860010 systemd[1]: Mounting tmp.mount... Oct 2 21:40:23.860019 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 21:40:23.860028 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 21:40:23.860038 systemd[1]: Starting kmod-static-nodes.service... Oct 2 21:40:23.860048 systemd[1]: Starting modprobe@configfs.service... Oct 2 21:40:23.860058 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 21:40:23.860067 systemd[1]: Starting modprobe@drm.service... Oct 2 21:40:23.860076 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 21:40:23.860086 systemd[1]: Starting modprobe@fuse.service... Oct 2 21:40:23.860095 systemd[1]: Starting modprobe@loop.service... Oct 2 21:40:23.860105 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 21:40:23.860114 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 21:40:23.860124 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 21:40:23.860134 kernel: loop: module loaded Oct 2 21:40:23.860143 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 21:40:23.860153 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 21:40:23.860162 systemd[1]: Stopped systemd-journald.service. Oct 2 21:40:23.860171 systemd[1]: systemd-journald.service: Consumed 3.115s CPU time. Oct 2 21:40:23.860180 systemd[1]: Starting systemd-journald.service... Oct 2 21:40:23.860189 kernel: fuse: init (API version 7.34) Oct 2 21:40:23.860198 systemd[1]: Starting systemd-modules-load.service... Oct 2 21:40:23.860208 systemd[1]: Starting systemd-network-generator.service... Oct 2 21:40:23.860219 systemd[1]: Starting systemd-remount-fs.service... Oct 2 21:40:23.860228 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 21:40:23.860246 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 21:40:23.860255 systemd[1]: Stopped verity-setup.service. Oct 2 21:40:23.860265 systemd[1]: Mounted dev-hugepages.mount. Oct 2 21:40:23.860274 systemd[1]: Mounted dev-mqueue.mount. Oct 2 21:40:23.860287 systemd-journald[1181]: Journal started Oct 2 21:40:23.860324 systemd-journald[1181]: Runtime Journal (/run/log/journal/d68ad9703f1d4b1297904f0512ccd1d7) is 8.0M, max 78.6M, 70.6M free. Oct 2 21:40:16.994000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 21:40:17.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 21:40:17.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 21:40:17.517000 audit: BPF prog-id=10 op=LOAD Oct 2 21:40:17.517000 audit: BPF prog-id=10 op=UNLOAD Oct 2 21:40:17.517000 audit: BPF prog-id=11 op=LOAD Oct 2 21:40:17.517000 audit: BPF prog-id=11 op=UNLOAD Oct 2 21:40:23.126000 audit: BPF prog-id=12 op=LOAD Oct 2 21:40:23.126000 audit: BPF prog-id=3 op=UNLOAD Oct 2 21:40:23.131000 audit: BPF prog-id=13 op=LOAD Oct 2 21:40:23.137000 audit: BPF prog-id=14 op=LOAD Oct 2 21:40:23.137000 audit: BPF prog-id=4 op=UNLOAD Oct 2 21:40:23.137000 audit: BPF prog-id=5 op=UNLOAD Oct 2 21:40:23.138000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.169000 audit: BPF prog-id=12 op=UNLOAD Oct 2 21:40:23.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.741000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.758000 audit: BPF prog-id=15 op=LOAD Oct 2 21:40:23.759000 audit: BPF prog-id=16 op=LOAD Oct 2 21:40:23.759000 audit: BPF prog-id=17 op=LOAD Oct 2 21:40:23.759000 audit: BPF prog-id=13 op=UNLOAD Oct 2 21:40:23.759000 audit: BPF prog-id=14 op=UNLOAD Oct 2 21:40:23.841000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.856000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 21:40:23.856000 audit[1181]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=ffffe4727820 a2=4000 a3=1 items=0 ppid=1 pid=1181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:40:23.856000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 21:40:18.290575 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:40:23.124537 systemd[1]: Queued start job for default target multi-user.target. Oct 2 21:40:18.325469 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 21:40:23.138154 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 21:40:18.325527 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 21:40:23.138697 systemd[1]: systemd-journald.service: Consumed 3.115s CPU time. Oct 2 21:40:18.325613 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 21:40:18.325632 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 21:40:18.325698 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 21:40:18.325720 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 21:40:18.326088 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 21:40:18.326169 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 21:40:18.326192 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 21:40:18.326714 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 21:40:18.326758 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 21:40:18.326776 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 21:40:18.326790 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 21:40:18.326808 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 21:40:18.326830 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:18Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 21:40:22.389499 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:22Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:40:22.389757 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:22Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:40:22.389862 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:22Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:40:22.390019 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:22Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 21:40:22.390067 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:22Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 21:40:22.390121 /usr/lib/systemd/system-generators/torcx-generator[1075]: time="2023-10-02T21:40:22Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 21:40:23.869058 systemd[1]: Started systemd-journald.service. Oct 2 21:40:23.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.873893 systemd[1]: Mounted media.mount. Oct 2 21:40:23.877763 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 21:40:23.882105 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 21:40:23.887960 systemd[1]: Mounted tmp.mount. Oct 2 21:40:23.892578 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 21:40:23.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.897499 systemd[1]: Finished kmod-static-nodes.service. Oct 2 21:40:23.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.902762 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 21:40:23.902886 systemd[1]: Finished modprobe@configfs.service. Oct 2 21:40:23.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.907000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.908058 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 21:40:23.908172 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 21:40:23.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.913000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.918000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.913751 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 21:40:23.913870 systemd[1]: Finished modprobe@drm.service. Oct 2 21:40:23.918757 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 21:40:23.919188 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 21:40:23.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.924626 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 21:40:23.924794 systemd[1]: Finished modprobe@fuse.service. Oct 2 21:40:23.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.929000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.929725 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 21:40:23.929839 systemd[1]: Finished modprobe@loop.service. Oct 2 21:40:23.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.935000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.935841 systemd[1]: Finished systemd-modules-load.service. Oct 2 21:40:23.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.940919 systemd[1]: Finished systemd-network-generator.service. Oct 2 21:40:23.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.946539 systemd[1]: Finished systemd-remount-fs.service. Oct 2 21:40:23.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.951918 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 21:40:23.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:23.957190 systemd[1]: Reached target network-pre.target. Oct 2 21:40:23.963104 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 21:40:23.969257 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 21:40:23.973502 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 21:40:23.996802 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 21:40:24.002874 systemd[1]: Starting systemd-journal-flush.service... Oct 2 21:40:24.007429 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 21:40:24.008994 systemd[1]: Starting systemd-random-seed.service... Oct 2 21:40:24.013197 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 21:40:24.014317 systemd[1]: Starting systemd-sysctl.service... Oct 2 21:40:24.019840 systemd[1]: Starting systemd-sysusers.service... Oct 2 21:40:24.025801 systemd[1]: Starting systemd-udev-settle.service... Oct 2 21:40:24.032768 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 21:40:24.040670 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 21:40:24.053151 udevadm[1195]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 21:40:24.055132 systemd[1]: Finished systemd-random-seed.service. Oct 2 21:40:24.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:24.060297 systemd[1]: Reached target first-boot-complete.target. Oct 2 21:40:24.067849 systemd-journald[1181]: Time spent on flushing to /var/log/journal/d68ad9703f1d4b1297904f0512ccd1d7 is 17.646ms for 1109 entries. Oct 2 21:40:24.067849 systemd-journald[1181]: System Journal (/var/log/journal/d68ad9703f1d4b1297904f0512ccd1d7) is 8.0M, max 2.6G, 2.6G free. Oct 2 21:40:24.120196 systemd-journald[1181]: Received client request to flush runtime journal. Oct 2 21:40:24.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:24.111273 systemd[1]: Finished systemd-sysctl.service. Oct 2 21:40:24.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:24.121612 systemd[1]: Finished systemd-journal-flush.service. Oct 2 21:40:24.417076 systemd[1]: Finished systemd-sysusers.service. Oct 2 21:40:24.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:24.870845 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 21:40:24.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:24.875000 audit: BPF prog-id=18 op=LOAD Oct 2 21:40:24.876000 audit: BPF prog-id=19 op=LOAD Oct 2 21:40:24.876000 audit: BPF prog-id=7 op=UNLOAD Oct 2 21:40:24.876000 audit: BPF prog-id=8 op=UNLOAD Oct 2 21:40:24.876840 systemd[1]: Starting systemd-udevd.service... Oct 2 21:40:24.899302 systemd-udevd[1198]: Using default interface naming scheme 'v252'. Oct 2 21:40:25.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:25.002000 audit: BPF prog-id=20 op=LOAD Oct 2 21:40:24.996975 systemd[1]: Started systemd-udevd.service. Oct 2 21:40:25.005599 systemd[1]: Starting systemd-networkd.service... Oct 2 21:40:25.057000 audit: BPF prog-id=21 op=LOAD Oct 2 21:40:25.057000 audit: BPF prog-id=22 op=LOAD Oct 2 21:40:25.058000 audit: BPF prog-id=23 op=LOAD Oct 2 21:40:25.058908 systemd[1]: Starting systemd-userdbd.service... Oct 2 21:40:25.086078 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 21:40:25.121756 systemd[1]: Started systemd-userdbd.service. Oct 2 21:40:25.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:25.169258 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 21:40:25.169341 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 21:40:25.173000 audit[1202]: AVC avc: denied { confidentiality } for pid=1202 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 21:40:25.195907 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 21:40:25.196014 kernel: hv_vmbus: registering driver hv_balloon Oct 2 21:40:25.196031 kernel: hv_vmbus: registering driver hv_utils Oct 2 21:40:25.215376 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 21:40:25.223684 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 21:40:25.232779 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 21:40:25.232853 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 21:40:25.232868 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 21:40:25.683409 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 21:40:25.683485 kernel: hv_balloon: Memory hot add disabled on ARM64 Oct 2 21:40:25.691766 kernel: Console: switching to colour dummy device 80x25 Oct 2 21:40:25.696234 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 21:40:25.173000 audit[1202]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaaafd14ef60 a1=aa2c a2=ffffb4c924b0 a3=aaaafceac010 items=10 ppid=1198 pid=1202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:40:25.173000 audit: CWD cwd="/" Oct 2 21:40:25.173000 audit: PATH item=0 name=(null) inode=11406 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:40:25.173000 audit: PATH item=1 name=(null) inode=11407 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:40:25.173000 audit: PATH item=2 name=(null) inode=11406 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:40:25.173000 audit: PATH item=3 name=(null) inode=11408 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:40:25.173000 audit: PATH item=4 name=(null) inode=11406 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:40:25.173000 audit: PATH item=5 name=(null) inode=11409 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:40:25.173000 audit: PATH item=6 name=(null) inode=11406 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:40:25.173000 audit: PATH item=7 name=(null) inode=11410 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:40:25.173000 audit: PATH item=8 name=(null) inode=11406 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:40:25.173000 audit: PATH item=9 name=(null) inode=11411 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 21:40:25.173000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 21:40:25.868021 systemd-networkd[1212]: lo: Link UP Oct 2 21:40:25.868317 systemd-networkd[1212]: lo: Gained carrier Oct 2 21:40:25.868782 systemd-networkd[1212]: Enumeration completed Oct 2 21:40:25.868983 systemd[1]: Started systemd-networkd.service. Oct 2 21:40:25.870199 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1202) Oct 2 21:40:25.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:25.875060 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 21:40:25.890159 systemd-networkd[1212]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 21:40:25.913303 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 21:40:25.918843 systemd[1]: Finished systemd-udev-settle.service. Oct 2 21:40:25.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:25.924983 systemd[1]: Starting lvm2-activation-early.service... Oct 2 21:40:25.943205 kernel: mlx5_core 4545:00:02.0 enP17733s1: Link up Oct 2 21:40:25.970197 kernel: hv_netvsc 0022487b-60d5-0022-487b-60d50022487b eth0: Data path switched to VF: enP17733s1 Oct 2 21:40:25.971054 systemd-networkd[1212]: enP17733s1: Link UP Oct 2 21:40:25.971299 systemd-networkd[1212]: eth0: Link UP Oct 2 21:40:25.971361 systemd-networkd[1212]: eth0: Gained carrier Oct 2 21:40:25.976460 systemd-networkd[1212]: enP17733s1: Gained carrier Oct 2 21:40:25.986427 systemd-networkd[1212]: eth0: DHCPv4 address 10.200.20.15/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 21:40:26.141549 lvm[1276]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 21:40:26.176263 systemd[1]: Finished lvm2-activation-early.service. Oct 2 21:40:26.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:26.181365 systemd[1]: Reached target cryptsetup.target. Oct 2 21:40:26.187569 systemd[1]: Starting lvm2-activation.service... Oct 2 21:40:26.194302 lvm[1278]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 21:40:26.224279 systemd[1]: Finished lvm2-activation.service. Oct 2 21:40:26.227000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:26.229110 systemd[1]: Reached target local-fs-pre.target. Oct 2 21:40:26.233873 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 21:40:26.233903 systemd[1]: Reached target local-fs.target. Oct 2 21:40:26.238322 systemd[1]: Reached target machines.target. Oct 2 21:40:26.244463 systemd[1]: Starting ldconfig.service... Oct 2 21:40:26.249408 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 21:40:26.249490 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 21:40:26.250825 systemd[1]: Starting systemd-boot-update.service... Oct 2 21:40:26.258119 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 21:40:26.266684 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 21:40:26.271884 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 21:40:26.271951 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 21:40:26.273221 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 21:40:26.293331 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1280 (bootctl) Oct 2 21:40:26.294678 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 21:40:26.642005 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 21:40:26.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:26.846608 systemd-tmpfiles[1283]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 21:40:26.853576 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 21:40:26.855170 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 21:40:26.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:26.905222 systemd-tmpfiles[1283]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 21:40:26.953565 systemd-fsck[1288]: fsck.fat 4.2 (2021-01-31) Oct 2 21:40:26.953565 systemd-fsck[1288]: /dev/sda1: 236 files, 113463/258078 clusters Oct 2 21:40:26.956295 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 21:40:26.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:26.965625 systemd[1]: Mounting boot.mount... Oct 2 21:40:26.980345 systemd[1]: Mounted boot.mount. Oct 2 21:40:26.989280 systemd-tmpfiles[1283]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 21:40:26.992830 systemd[1]: Finished systemd-boot-update.service. Oct 2 21:40:26.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:27.984093 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 21:40:27.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:27.991351 systemd[1]: Starting audit-rules.service... Oct 2 21:40:27.997495 systemd[1]: Starting clean-ca-certificates.service... Oct 2 21:40:28.004091 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 21:40:28.014000 audit: BPF prog-id=24 op=LOAD Oct 2 21:40:28.016542 systemd[1]: Starting systemd-resolved.service... Oct 2 21:40:28.021000 audit: BPF prog-id=25 op=LOAD Oct 2 21:40:28.023330 systemd[1]: Starting systemd-timesyncd.service... Oct 2 21:40:28.029806 systemd[1]: Starting systemd-update-utmp.service... Oct 2 21:40:28.036171 systemd[1]: Finished clean-ca-certificates.service. Oct 2 21:40:28.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:28.045407 systemd-networkd[1212]: eth0: Gained IPv6LL Oct 2 21:40:28.046499 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 21:40:28.053236 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 21:40:28.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:28.078000 audit[1300]: SYSTEM_BOOT pid=1300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 21:40:28.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:28.084733 systemd[1]: Finished systemd-update-utmp.service. Oct 2 21:40:28.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:28.109122 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 21:40:28.144112 systemd[1]: Started systemd-timesyncd.service. Oct 2 21:40:28.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:28.149271 systemd[1]: Reached target time-set.target. Oct 2 21:40:28.198698 systemd-resolved[1298]: Positive Trust Anchors: Oct 2 21:40:28.198712 systemd-resolved[1298]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 21:40:28.198738 systemd-resolved[1298]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 21:40:28.251059 systemd-resolved[1298]: Using system hostname 'ci-3510.3.0-a-21920721f7'. Oct 2 21:40:28.252813 systemd[1]: Started systemd-resolved.service. Oct 2 21:40:28.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:40:28.257555 systemd[1]: Reached target network.target. Oct 2 21:40:28.261894 systemd[1]: Reached target network-online.target. Oct 2 21:40:28.267867 systemd[1]: Reached target nss-lookup.target. Oct 2 21:40:28.310000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 21:40:28.310000 audit[1315]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffda15c8e0 a2=420 a3=0 items=0 ppid=1294 pid=1315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:40:28.310000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 21:40:28.321281 augenrules[1315]: No rules Oct 2 21:40:28.321985 systemd[1]: Finished audit-rules.service. Oct 2 21:40:32.408416 ldconfig[1279]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 21:40:32.418063 systemd[1]: Finished ldconfig.service. Oct 2 21:40:32.424075 systemd[1]: Starting systemd-update-done.service... Oct 2 21:40:32.447124 systemd[1]: Finished systemd-update-done.service. Oct 2 21:40:32.451887 systemd[1]: Reached target sysinit.target. Oct 2 21:40:32.456021 systemd[1]: Started motdgen.path. Oct 2 21:40:32.459707 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 21:40:32.465601 systemd[1]: Started logrotate.timer. Oct 2 21:40:32.469381 systemd[1]: Started mdadm.timer. Oct 2 21:40:32.472868 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 21:40:32.477360 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 21:40:32.477388 systemd[1]: Reached target paths.target. Oct 2 21:40:32.481532 systemd[1]: Reached target timers.target. Oct 2 21:40:32.485976 systemd[1]: Listening on dbus.socket. Oct 2 21:40:32.491077 systemd[1]: Starting docker.socket... Oct 2 21:40:32.497687 systemd[1]: Listening on sshd.socket. Oct 2 21:40:32.501722 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 21:40:32.502270 systemd[1]: Listening on docker.socket. Oct 2 21:40:32.506370 systemd[1]: Reached target sockets.target. Oct 2 21:40:32.510491 systemd[1]: Reached target basic.target. Oct 2 21:40:32.514399 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 21:40:32.514424 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 21:40:32.515815 systemd[1]: Starting containerd.service... Oct 2 21:40:32.520460 systemd[1]: Starting dbus.service... Oct 2 21:40:32.524942 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 21:40:32.530653 systemd[1]: Starting extend-filesystems.service... Oct 2 21:40:32.538379 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 21:40:32.539695 systemd[1]: Starting motdgen.service... Oct 2 21:40:32.544444 systemd[1]: Started nvidia.service. Oct 2 21:40:32.549594 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 21:40:32.554925 systemd[1]: Starting prepare-critools.service... Oct 2 21:40:32.560852 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 21:40:32.568504 systemd[1]: Starting sshd-keygen.service... Oct 2 21:40:32.575601 systemd[1]: Starting systemd-logind.service... Oct 2 21:40:32.581913 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 21:40:32.581983 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 21:40:32.582498 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 21:40:32.583280 systemd[1]: Starting update-engine.service... Oct 2 21:40:32.588856 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 21:40:32.595376 jq[1325]: false Oct 2 21:40:32.598325 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 21:40:32.598511 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 21:40:32.608557 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 21:40:32.608703 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 21:40:32.611166 jq[1343]: true Oct 2 21:40:32.613400 extend-filesystems[1326]: Found sda Oct 2 21:40:32.628267 extend-filesystems[1326]: Found sda1 Oct 2 21:40:32.628267 extend-filesystems[1326]: Found sda2 Oct 2 21:40:32.628267 extend-filesystems[1326]: Found sda3 Oct 2 21:40:32.628267 extend-filesystems[1326]: Found usr Oct 2 21:40:32.628267 extend-filesystems[1326]: Found sda4 Oct 2 21:40:32.628267 extend-filesystems[1326]: Found sda6 Oct 2 21:40:32.628267 extend-filesystems[1326]: Found sda7 Oct 2 21:40:32.628267 extend-filesystems[1326]: Found sda9 Oct 2 21:40:32.628267 extend-filesystems[1326]: Checking size of /dev/sda9 Oct 2 21:40:32.640023 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 21:40:32.692491 jq[1347]: true Oct 2 21:40:32.640237 systemd[1]: Finished motdgen.service. Oct 2 21:40:32.724324 extend-filesystems[1326]: Old size kept for /dev/sda9 Oct 2 21:40:32.724324 extend-filesystems[1326]: Found sr0 Oct 2 21:40:32.698464 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 21:40:32.751127 env[1351]: time="2023-10-02T21:40:32.735958520Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 21:40:32.698635 systemd[1]: Finished extend-filesystems.service. Oct 2 21:40:32.707354 systemd-logind[1339]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 2 21:40:32.711703 systemd-logind[1339]: New seat seat0. Oct 2 21:40:32.786167 tar[1345]: ./ Oct 2 21:40:32.786167 tar[1345]: ./macvlan Oct 2 21:40:32.787623 tar[1346]: crictl Oct 2 21:40:32.792458 bash[1394]: Updated "/home/core/.ssh/authorized_keys" Oct 2 21:40:32.793415 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 21:40:32.819682 env[1351]: time="2023-10-02T21:40:32.819623960Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 21:40:32.819823 env[1351]: time="2023-10-02T21:40:32.819797320Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:40:32.823740 dbus-daemon[1324]: [system] SELinux support is enabled Oct 2 21:40:32.830439 dbus-daemon[1324]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 21:40:32.834604 env[1351]: time="2023-10-02T21:40:32.831195320Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 21:40:32.834604 env[1351]: time="2023-10-02T21:40:32.831235520Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:40:32.834604 env[1351]: time="2023-10-02T21:40:32.831495640Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 21:40:32.834604 env[1351]: time="2023-10-02T21:40:32.831516680Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 21:40:32.834604 env[1351]: time="2023-10-02T21:40:32.831530360Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 21:40:32.834604 env[1351]: time="2023-10-02T21:40:32.831539880Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 21:40:32.834604 env[1351]: time="2023-10-02T21:40:32.831615240Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:40:32.834604 env[1351]: time="2023-10-02T21:40:32.831884240Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 21:40:32.834604 env[1351]: time="2023-10-02T21:40:32.831993080Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 21:40:32.834604 env[1351]: time="2023-10-02T21:40:32.832007960Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 21:40:32.823913 systemd[1]: Started dbus.service. Oct 2 21:40:32.834860 env[1351]: time="2023-10-02T21:40:32.832056200Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 21:40:32.834860 env[1351]: time="2023-10-02T21:40:32.832068800Z" level=info msg="metadata content store policy set" policy=shared Oct 2 21:40:32.829486 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 21:40:32.829524 systemd[1]: Reached target system-config.target. Oct 2 21:40:32.837738 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 21:40:32.837762 systemd[1]: Reached target user-config.target. Oct 2 21:40:32.845788 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 21:40:32.846160 systemd[1]: Started systemd-logind.service. Oct 2 21:40:32.870897 env[1351]: time="2023-10-02T21:40:32.870844200Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 21:40:32.871035 env[1351]: time="2023-10-02T21:40:32.870919080Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 21:40:32.871035 env[1351]: time="2023-10-02T21:40:32.870935080Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 21:40:32.871035 env[1351]: time="2023-10-02T21:40:32.870982120Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 21:40:32.871035 env[1351]: time="2023-10-02T21:40:32.871001880Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 21:40:32.871035 env[1351]: time="2023-10-02T21:40:32.871016240Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 21:40:32.871172 env[1351]: time="2023-10-02T21:40:32.871150320Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 21:40:32.871566 env[1351]: time="2023-10-02T21:40:32.871539680Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 21:40:32.871610 env[1351]: time="2023-10-02T21:40:32.871574560Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 21:40:32.871610 env[1351]: time="2023-10-02T21:40:32.871588880Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 21:40:32.871610 env[1351]: time="2023-10-02T21:40:32.871601400Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 21:40:32.871672 env[1351]: time="2023-10-02T21:40:32.871613840Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 21:40:32.871798 env[1351]: time="2023-10-02T21:40:32.871775400Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 21:40:32.871902 env[1351]: time="2023-10-02T21:40:32.871879920Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 21:40:32.872403 env[1351]: time="2023-10-02T21:40:32.872348480Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 21:40:32.872403 env[1351]: time="2023-10-02T21:40:32.872394400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 21:40:32.872474 env[1351]: time="2023-10-02T21:40:32.872409600Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 21:40:32.872508 env[1351]: time="2023-10-02T21:40:32.872488960Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 21:40:32.872547 env[1351]: time="2023-10-02T21:40:32.872507920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 21:40:32.872547 env[1351]: time="2023-10-02T21:40:32.872521080Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 21:40:32.872547 env[1351]: time="2023-10-02T21:40:32.872532280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 21:40:32.872603 env[1351]: time="2023-10-02T21:40:32.872555440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 21:40:32.872603 env[1351]: time="2023-10-02T21:40:32.872568640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 21:40:32.872603 env[1351]: time="2023-10-02T21:40:32.872579680Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 21:40:32.872603 env[1351]: time="2023-10-02T21:40:32.872590400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 21:40:32.872769 env[1351]: time="2023-10-02T21:40:32.872746440Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 21:40:32.873073 env[1351]: time="2023-10-02T21:40:32.873033760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 21:40:32.873073 env[1351]: time="2023-10-02T21:40:32.873072440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 21:40:32.873140 env[1351]: time="2023-10-02T21:40:32.873086440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 21:40:32.873140 env[1351]: time="2023-10-02T21:40:32.873098600Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 21:40:32.873140 env[1351]: time="2023-10-02T21:40:32.873114280Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 21:40:32.873140 env[1351]: time="2023-10-02T21:40:32.873133680Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 21:40:32.873251 env[1351]: time="2023-10-02T21:40:32.873151880Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 21:40:32.873251 env[1351]: time="2023-10-02T21:40:32.873207560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 21:40:32.873506 env[1351]: time="2023-10-02T21:40:32.873447880Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 21:40:32.883933 env[1351]: time="2023-10-02T21:40:32.873518320Z" level=info msg="Connect containerd service" Oct 2 21:40:32.883933 env[1351]: time="2023-10-02T21:40:32.873550400Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 21:40:32.883933 env[1351]: time="2023-10-02T21:40:32.874336960Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 21:40:32.883933 env[1351]: time="2023-10-02T21:40:32.874634160Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 21:40:32.883933 env[1351]: time="2023-10-02T21:40:32.874671640Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 21:40:32.874796 systemd[1]: Started containerd.service. Oct 2 21:40:32.884667 tar[1345]: ./static Oct 2 21:40:32.893307 env[1351]: time="2023-10-02T21:40:32.893247360Z" level=info msg="Start subscribing containerd event" Oct 2 21:40:32.893891 env[1351]: time="2023-10-02T21:40:32.893851560Z" level=info msg="Start recovering state" Oct 2 21:40:32.894047 env[1351]: time="2023-10-02T21:40:32.894025800Z" level=info msg="Start event monitor" Oct 2 21:40:32.894299 env[1351]: time="2023-10-02T21:40:32.894278200Z" level=info msg="Start snapshots syncer" Oct 2 21:40:32.894299 env[1351]: time="2023-10-02T21:40:32.894296960Z" level=info msg="Start cni network conf syncer for default" Oct 2 21:40:32.894376 env[1351]: time="2023-10-02T21:40:32.894305640Z" level=info msg="Start streaming server" Oct 2 21:40:32.894376 env[1351]: time="2023-10-02T21:40:32.893342800Z" level=info msg="containerd successfully booted in 0.158199s" Oct 2 21:40:32.920442 tar[1345]: ./vlan Oct 2 21:40:32.969790 tar[1345]: ./portmap Oct 2 21:40:33.015546 tar[1345]: ./host-local Oct 2 21:40:33.068308 tar[1345]: ./vrf Oct 2 21:40:33.108880 tar[1345]: ./bridge Oct 2 21:40:33.112360 update_engine[1340]: I1002 21:40:33.102035 1340 main.cc:92] Flatcar Update Engine starting Oct 2 21:40:33.143010 tar[1345]: ./tuning Oct 2 21:40:33.147008 systemd[1]: Started update-engine.service. Oct 2 21:40:33.153285 update_engine[1340]: I1002 21:40:33.147035 1340 update_check_scheduler.cc:74] Next update check in 2m14s Oct 2 21:40:33.154246 systemd[1]: Started locksmithd.service. Oct 2 21:40:33.183113 tar[1345]: ./firewall Oct 2 21:40:33.218871 tar[1345]: ./host-device Oct 2 21:40:33.250075 tar[1345]: ./sbr Oct 2 21:40:33.278133 tar[1345]: ./loopback Oct 2 21:40:33.307644 tar[1345]: ./dhcp Oct 2 21:40:33.383789 tar[1345]: ./ptp Oct 2 21:40:33.416877 tar[1345]: ./ipvlan Oct 2 21:40:33.449489 tar[1345]: ./bandwidth Oct 2 21:40:33.542369 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 21:40:33.568944 systemd[1]: Finished prepare-critools.service. Oct 2 21:40:34.446302 locksmithd[1433]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 21:40:35.665012 sshd_keygen[1348]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 21:40:35.691654 systemd[1]: Finished sshd-keygen.service. Oct 2 21:40:35.698044 systemd[1]: Starting issuegen.service... Oct 2 21:40:35.702939 systemd[1]: Started waagent.service. Oct 2 21:40:35.710102 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 21:40:35.710286 systemd[1]: Finished issuegen.service. Oct 2 21:40:35.716173 systemd[1]: Starting systemd-user-sessions.service... Oct 2 21:40:35.738084 systemd[1]: Finished systemd-user-sessions.service. Oct 2 21:40:35.745791 systemd[1]: Started getty@tty1.service. Oct 2 21:40:35.752265 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 21:40:35.757507 systemd[1]: Reached target getty.target. Oct 2 21:40:35.761952 systemd[1]: Reached target multi-user.target. Oct 2 21:40:35.769439 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 21:40:35.784055 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 21:40:35.784239 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 21:40:35.789463 systemd[1]: Startup finished in 739ms (kernel) + 17.041s (initrd) + 18.666s (userspace) = 36.447s. Oct 2 21:40:36.179083 login[1455]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Oct 2 21:40:36.179391 login[1454]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 21:40:36.209854 systemd[1]: Created slice user-500.slice. Oct 2 21:40:36.210907 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 21:40:36.214233 systemd-logind[1339]: New session 2 of user core. Oct 2 21:40:36.244491 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 21:40:36.246237 systemd[1]: Starting user@500.service... Oct 2 21:40:36.269860 (systemd)[1458]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:40:36.446499 systemd[1458]: Queued start job for default target default.target. Oct 2 21:40:36.447007 systemd[1458]: Reached target paths.target. Oct 2 21:40:36.447027 systemd[1458]: Reached target sockets.target. Oct 2 21:40:36.447038 systemd[1458]: Reached target timers.target. Oct 2 21:40:36.447047 systemd[1458]: Reached target basic.target. Oct 2 21:40:36.447090 systemd[1458]: Reached target default.target. Oct 2 21:40:36.447112 systemd[1458]: Startup finished in 168ms. Oct 2 21:40:36.447231 systemd[1]: Started user@500.service. Oct 2 21:40:36.448136 systemd[1]: Started session-2.scope. Oct 2 21:40:37.180488 login[1455]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 21:40:37.184689 systemd-logind[1339]: New session 1 of user core. Oct 2 21:40:37.185099 systemd[1]: Started session-1.scope. Oct 2 21:40:40.206113 waagent[1449]: 2023-10-02T21:40:40.205994Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 21:40:40.222669 waagent[1449]: 2023-10-02T21:40:40.222576Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 21:40:40.227517 waagent[1449]: 2023-10-02T21:40:40.227448Z INFO Daemon Daemon Python: 3.9.16 Oct 2 21:40:40.232458 waagent[1449]: 2023-10-02T21:40:40.232054Z INFO Daemon Daemon Run daemon Oct 2 21:40:40.236891 waagent[1449]: 2023-10-02T21:40:40.236825Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 21:40:40.258988 waagent[1449]: 2023-10-02T21:40:40.258840Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 21:40:40.275895 waagent[1449]: 2023-10-02T21:40:40.275744Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 21:40:40.286348 waagent[1449]: 2023-10-02T21:40:40.286266Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 21:40:40.291696 waagent[1449]: 2023-10-02T21:40:40.291620Z INFO Daemon Daemon Using waagent for provisioning Oct 2 21:40:40.297741 waagent[1449]: 2023-10-02T21:40:40.297671Z INFO Daemon Daemon Activate resource disk Oct 2 21:40:40.302658 waagent[1449]: 2023-10-02T21:40:40.302591Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 21:40:40.318175 waagent[1449]: 2023-10-02T21:40:40.318097Z INFO Daemon Daemon Found device: None Oct 2 21:40:40.323462 waagent[1449]: 2023-10-02T21:40:40.323387Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 21:40:40.332412 waagent[1449]: 2023-10-02T21:40:40.332341Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 21:40:40.346487 waagent[1449]: 2023-10-02T21:40:40.346414Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 21:40:40.353416 waagent[1449]: 2023-10-02T21:40:40.353338Z INFO Daemon Daemon Running default provisioning handler Oct 2 21:40:40.369709 waagent[1449]: 2023-10-02T21:40:40.369549Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 21:40:40.385710 waagent[1449]: 2023-10-02T21:40:40.385563Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 21:40:40.395843 waagent[1449]: 2023-10-02T21:40:40.395754Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 21:40:40.401366 waagent[1449]: 2023-10-02T21:40:40.401285Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 21:40:40.427498 waagent[1449]: 2023-10-02T21:40:40.427367Z INFO Daemon Daemon Successfully mounted dvd Oct 2 21:40:40.531022 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 21:40:40.567048 waagent[1449]: 2023-10-02T21:40:40.566851Z INFO Daemon Daemon Detect protocol endpoint Oct 2 21:40:40.572403 waagent[1449]: 2023-10-02T21:40:40.572317Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 21:40:40.578353 waagent[1449]: 2023-10-02T21:40:40.578277Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 21:40:40.585024 waagent[1449]: 2023-10-02T21:40:40.584956Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 21:40:40.590937 waagent[1449]: 2023-10-02T21:40:40.590863Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 21:40:40.596302 waagent[1449]: 2023-10-02T21:40:40.596238Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 21:40:40.728427 waagent[1449]: 2023-10-02T21:40:40.728354Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 21:40:40.735968 waagent[1449]: 2023-10-02T21:40:40.735921Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 21:40:40.742136 waagent[1449]: 2023-10-02T21:40:40.742063Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 21:40:41.462279 waagent[1449]: 2023-10-02T21:40:41.462122Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 21:40:41.477174 waagent[1449]: 2023-10-02T21:40:41.477104Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 21:40:41.482979 waagent[1449]: 2023-10-02T21:40:41.482916Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 21:40:41.571100 waagent[1449]: 2023-10-02T21:40:41.570961Z INFO Daemon Daemon Found private key matching thumbprint 593BCD7EFF48981F14DA35845C48F590B69E74BE Oct 2 21:40:41.579441 waagent[1449]: 2023-10-02T21:40:41.579361Z INFO Daemon Daemon Certificate with thumbprint 646D8C3B7CB6B2CB0A1D3429782D3601A035EBE6 has no matching private key. Oct 2 21:40:41.588923 waagent[1449]: 2023-10-02T21:40:41.588847Z INFO Daemon Daemon Fetch goal state completed Oct 2 21:40:41.635790 waagent[1449]: 2023-10-02T21:40:41.635698Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: a0075312-f4f0-4ccd-9ca4-cd566ded7291 New eTag: 14683314817727951322] Oct 2 21:40:41.648663 waagent[1449]: 2023-10-02T21:40:41.648577Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 21:40:41.663890 waagent[1449]: 2023-10-02T21:40:41.663813Z INFO Daemon Daemon Starting provisioning Oct 2 21:40:41.669104 waagent[1449]: 2023-10-02T21:40:41.669038Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 21:40:41.673976 waagent[1449]: 2023-10-02T21:40:41.673918Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-21920721f7] Oct 2 21:40:41.714704 waagent[1449]: 2023-10-02T21:40:41.714535Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-21920721f7] Oct 2 21:40:41.721403 waagent[1449]: 2023-10-02T21:40:41.721321Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 21:40:41.728101 waagent[1449]: 2023-10-02T21:40:41.728033Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 21:40:41.750582 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 21:40:41.750754 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 21:40:41.750812 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 21:40:41.751046 systemd[1]: Stopping systemd-networkd.service... Oct 2 21:40:41.755227 systemd-networkd[1212]: eth0: DHCPv6 lease lost Oct 2 21:40:41.755501 systemd-timesyncd[1299]: Network configuration changed, trying to establish connection. Oct 2 21:40:41.758386 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 21:40:41.758567 systemd[1]: Stopped systemd-networkd.service. Oct 2 21:40:41.760617 systemd[1]: Starting systemd-networkd.service... Oct 2 21:40:41.793098 systemd-networkd[1499]: enP17733s1: Link UP Oct 2 21:40:41.793380 systemd-networkd[1499]: enP17733s1: Gained carrier Oct 2 21:40:41.794371 systemd-networkd[1499]: eth0: Link UP Oct 2 21:40:41.794439 systemd-networkd[1499]: eth0: Gained carrier Oct 2 21:40:41.794808 systemd-networkd[1499]: lo: Link UP Oct 2 21:40:41.794872 systemd-networkd[1499]: lo: Gained carrier Oct 2 21:40:41.795148 systemd-networkd[1499]: eth0: Gained IPv6LL Oct 2 21:40:41.795433 systemd-networkd[1499]: Enumeration completed Oct 2 21:40:41.795452 systemd-timesyncd[1299]: Network configuration changed, trying to establish connection. Oct 2 21:40:41.795521 systemd-timesyncd[1299]: Network configuration changed, trying to establish connection. Oct 2 21:40:41.796234 systemd-networkd[1499]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 21:40:41.796480 systemd-timesyncd[1299]: Network configuration changed, trying to establish connection. Oct 2 21:40:41.796833 systemd[1]: Started systemd-networkd.service. Oct 2 21:40:41.799244 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 21:40:41.800703 waagent[1449]: 2023-10-02T21:40:41.800452Z INFO Daemon Daemon Create user account if not exists Oct 2 21:40:41.808714 systemd-timesyncd[1299]: Network configuration changed, trying to establish connection. Oct 2 21:40:41.810520 waagent[1449]: 2023-10-02T21:40:41.806864Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 21:40:41.817271 waagent[1449]: 2023-10-02T21:40:41.817001Z INFO Daemon Daemon Configure sudoer Oct 2 21:40:41.823335 waagent[1449]: 2023-10-02T21:40:41.822031Z INFO Daemon Daemon Configure sshd Oct 2 21:40:41.823542 systemd-networkd[1499]: eth0: DHCPv4 address 10.200.20.15/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 21:40:41.827008 systemd-timesyncd[1299]: Network configuration changed, trying to establish connection. Oct 2 21:40:41.827010 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 21:40:41.828203 waagent[1449]: 2023-10-02T21:40:41.827971Z INFO Daemon Daemon Deploy ssh public key. Oct 2 21:40:41.895026 waagent[1449]: 2023-10-02T21:40:41.894901Z INFO Daemon Daemon Decode custom data Oct 2 21:40:41.900293 waagent[1449]: 2023-10-02T21:40:41.900212Z INFO Daemon Daemon Save custom data Oct 2 21:40:43.086071 waagent[1449]: 2023-10-02T21:40:43.085942Z INFO Daemon Daemon Provisioning complete Oct 2 21:40:43.105242 waagent[1449]: 2023-10-02T21:40:43.105152Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 21:40:43.111939 waagent[1449]: 2023-10-02T21:40:43.111860Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 21:40:43.123037 waagent[1449]: 2023-10-02T21:40:43.122953Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 21:40:43.430069 waagent[1513]: 2023-10-02T21:40:43.429972Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 21:40:43.430891 waagent[1513]: 2023-10-02T21:40:43.430824Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:40:43.431022 waagent[1513]: 2023-10-02T21:40:43.430976Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:40:43.443962 waagent[1513]: 2023-10-02T21:40:43.443865Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 21:40:43.444170 waagent[1513]: 2023-10-02T21:40:43.444112Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 21:40:43.527778 waagent[1513]: 2023-10-02T21:40:43.527624Z INFO ExtHandler ExtHandler Found private key matching thumbprint 593BCD7EFF48981F14DA35845C48F590B69E74BE Oct 2 21:40:43.528008 waagent[1513]: 2023-10-02T21:40:43.527955Z INFO ExtHandler ExtHandler Certificate with thumbprint 646D8C3B7CB6B2CB0A1D3429782D3601A035EBE6 has no matching private key. Oct 2 21:40:43.528260 waagent[1513]: 2023-10-02T21:40:43.528209Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 21:40:43.543295 waagent[1513]: 2023-10-02T21:40:43.543235Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 6ac3db4a-d024-4b02-9038-68eae712f7cb New eTag: 14683314817727951322] Oct 2 21:40:43.543980 waagent[1513]: 2023-10-02T21:40:43.543916Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 21:40:43.604824 waagent[1513]: 2023-10-02T21:40:43.604671Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 21:40:43.615386 waagent[1513]: 2023-10-02T21:40:43.615300Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1513 Oct 2 21:40:43.619263 waagent[1513]: 2023-10-02T21:40:43.619175Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 21:40:43.620703 waagent[1513]: 2023-10-02T21:40:43.620637Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 21:40:43.710356 waagent[1513]: 2023-10-02T21:40:43.710230Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 21:40:43.710740 waagent[1513]: 2023-10-02T21:40:43.710679Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 21:40:43.721606 waagent[1513]: 2023-10-02T21:40:43.721536Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 21:40:43.722194 waagent[1513]: 2023-10-02T21:40:43.722125Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 21:40:43.723436 waagent[1513]: 2023-10-02T21:40:43.723367Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 21:40:43.724932 waagent[1513]: 2023-10-02T21:40:43.724855Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 21:40:43.725805 waagent[1513]: 2023-10-02T21:40:43.725740Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:40:43.726088 waagent[1513]: 2023-10-02T21:40:43.726037Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:40:43.726770 waagent[1513]: 2023-10-02T21:40:43.726700Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 21:40:43.727399 waagent[1513]: 2023-10-02T21:40:43.727331Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 21:40:43.727650 waagent[1513]: 2023-10-02T21:40:43.727584Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:40:43.727917 waagent[1513]: 2023-10-02T21:40:43.727855Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:40:43.728767 waagent[1513]: 2023-10-02T21:40:43.728688Z INFO EnvHandler ExtHandler Configure routes Oct 2 21:40:43.729073 waagent[1513]: 2023-10-02T21:40:43.729010Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 21:40:43.729073 waagent[1513]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 21:40:43.729073 waagent[1513]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 21:40:43.729073 waagent[1513]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 21:40:43.729073 waagent[1513]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:40:43.729073 waagent[1513]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:40:43.729073 waagent[1513]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:40:43.729270 waagent[1513]: 2023-10-02T21:40:43.729167Z INFO EnvHandler ExtHandler Gateway:None Oct 2 21:40:43.729385 waagent[1513]: 2023-10-02T21:40:43.729331Z INFO EnvHandler ExtHandler Routes:None Oct 2 21:40:43.730204 waagent[1513]: 2023-10-02T21:40:43.729985Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 21:40:43.730272 waagent[1513]: 2023-10-02T21:40:43.730214Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 21:40:43.733234 waagent[1513]: 2023-10-02T21:40:43.733107Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 21:40:43.733702 waagent[1513]: 2023-10-02T21:40:43.733616Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 21:40:43.733964 waagent[1513]: 2023-10-02T21:40:43.733902Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 21:40:43.745480 waagent[1513]: 2023-10-02T21:40:43.745402Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 21:40:43.747074 waagent[1513]: 2023-10-02T21:40:43.747008Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 21:40:43.749599 waagent[1513]: 2023-10-02T21:40:43.749529Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 21:40:43.769264 waagent[1513]: 2023-10-02T21:40:43.769122Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1499' Oct 2 21:40:43.795220 waagent[1513]: 2023-10-02T21:40:43.795130Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 21:40:43.822174 waagent[1513]: 2023-10-02T21:40:43.822037Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 21:40:43.822174 waagent[1513]: Executing ['ip', '-a', '-o', 'link']: Oct 2 21:40:43.822174 waagent[1513]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 21:40:43.822174 waagent[1513]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:7b:60:d5 brd ff:ff:ff:ff:ff:ff Oct 2 21:40:43.822174 waagent[1513]: 3: enP17733s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:7b:60:d5 brd ff:ff:ff:ff:ff:ff\ altname enP17733p0s2 Oct 2 21:40:43.822174 waagent[1513]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 21:40:43.822174 waagent[1513]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 21:40:43.822174 waagent[1513]: 2: eth0 inet 10.200.20.15/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 21:40:43.822174 waagent[1513]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 21:40:43.822174 waagent[1513]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 21:40:43.822174 waagent[1513]: 2: eth0 inet6 fe80::222:48ff:fe7b:60d5/64 scope link \ valid_lft forever preferred_lft forever Oct 2 21:40:43.960442 waagent[1513]: 2023-10-02T21:40:43.960322Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.9.1.1 -- exiting Oct 2 21:40:44.126893 waagent[1449]: 2023-10-02T21:40:44.126729Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 21:40:44.131240 waagent[1449]: 2023-10-02T21:40:44.131157Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.9.1.1 to be the latest agent Oct 2 21:40:45.329997 waagent[1542]: 2023-10-02T21:40:45.329881Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.9.1.1) Oct 2 21:40:45.330764 waagent[1542]: 2023-10-02T21:40:45.330693Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 21:40:45.330889 waagent[1542]: 2023-10-02T21:40:45.330843Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 21:40:45.340921 waagent[1542]: 2023-10-02T21:40:45.340767Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 21:40:45.341417 waagent[1542]: 2023-10-02T21:40:45.341359Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:40:45.341574 waagent[1542]: 2023-10-02T21:40:45.341526Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:40:45.355636 waagent[1542]: 2023-10-02T21:40:45.355537Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 21:40:45.365054 waagent[1542]: 2023-10-02T21:40:45.364990Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 21:40:45.366215 waagent[1542]: 2023-10-02T21:40:45.366137Z INFO ExtHandler Oct 2 21:40:45.366375 waagent[1542]: 2023-10-02T21:40:45.366326Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: f98d291f-ce1a-4363-912f-195597104519 eTag: 14683314817727951322 source: Fabric] Oct 2 21:40:45.367145 waagent[1542]: 2023-10-02T21:40:45.367085Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 21:40:45.368413 waagent[1542]: 2023-10-02T21:40:45.368355Z INFO ExtHandler Oct 2 21:40:45.368542 waagent[1542]: 2023-10-02T21:40:45.368497Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 21:40:45.375080 waagent[1542]: 2023-10-02T21:40:45.375023Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 21:40:45.375660 waagent[1542]: 2023-10-02T21:40:45.375610Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 21:40:45.396735 waagent[1542]: 2023-10-02T21:40:45.396667Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 21:40:45.487011 waagent[1542]: 2023-10-02T21:40:45.486857Z INFO ExtHandler Downloaded certificate {'thumbprint': '646D8C3B7CB6B2CB0A1D3429782D3601A035EBE6', 'hasPrivateKey': False} Oct 2 21:40:45.488238 waagent[1542]: 2023-10-02T21:40:45.488152Z INFO ExtHandler Downloaded certificate {'thumbprint': '593BCD7EFF48981F14DA35845C48F590B69E74BE', 'hasPrivateKey': True} Oct 2 21:40:45.489346 waagent[1542]: 2023-10-02T21:40:45.489282Z INFO ExtHandler Fetch goal state completed Oct 2 21:40:45.511988 waagent[1542]: 2023-10-02T21:40:45.511900Z INFO ExtHandler ExtHandler WALinuxAgent-2.9.1.1 running as process 1542 Oct 2 21:40:45.515671 waagent[1542]: 2023-10-02T21:40:45.515585Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 21:40:45.517261 waagent[1542]: 2023-10-02T21:40:45.517171Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 21:40:45.523914 waagent[1542]: 2023-10-02T21:40:45.523843Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 21:40:45.524377 waagent[1542]: 2023-10-02T21:40:45.524316Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 21:40:45.535471 waagent[1542]: 2023-10-02T21:40:45.535396Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 21:40:45.536121 waagent[1542]: 2023-10-02T21:40:45.536056Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 21:40:45.544834 waagent[1542]: 2023-10-02T21:40:45.544683Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. Oct 2 21:40:45.548924 waagent[1542]: 2023-10-02T21:40:45.548856Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 21:40:45.550638 waagent[1542]: 2023-10-02T21:40:45.550546Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 21:40:45.551579 waagent[1542]: 2023-10-02T21:40:45.551510Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:40:45.551872 waagent[1542]: 2023-10-02T21:40:45.551821Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:40:45.552648 waagent[1542]: 2023-10-02T21:40:45.552577Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 21:40:45.553207 waagent[1542]: 2023-10-02T21:40:45.553127Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 21:40:45.553504 waagent[1542]: 2023-10-02T21:40:45.553444Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 21:40:45.554330 waagent[1542]: 2023-10-02T21:40:45.554075Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 21:40:45.554400 waagent[1542]: 2023-10-02T21:40:45.554342Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 21:40:45.554633 waagent[1542]: 2023-10-02T21:40:45.554549Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 21:40:45.554633 waagent[1542]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 21:40:45.554633 waagent[1542]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 21:40:45.554633 waagent[1542]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 21:40:45.554633 waagent[1542]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:40:45.554633 waagent[1542]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:40:45.554633 waagent[1542]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 21:40:45.554932 waagent[1542]: 2023-10-02T21:40:45.554865Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 21:40:45.555865 waagent[1542]: 2023-10-02T21:40:45.555804Z INFO EnvHandler ExtHandler Configure routes Oct 2 21:40:45.555865 waagent[1542]: 2023-10-02T21:40:45.555490Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 21:40:45.556292 waagent[1542]: 2023-10-02T21:40:45.556234Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 21:40:45.559119 waagent[1542]: 2023-10-02T21:40:45.558933Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 21:40:45.563222 waagent[1542]: 2023-10-02T21:40:45.563107Z INFO EnvHandler ExtHandler Gateway:None Oct 2 21:40:45.564315 waagent[1542]: 2023-10-02T21:40:45.564235Z INFO EnvHandler ExtHandler Routes:None Oct 2 21:40:45.579086 waagent[1542]: 2023-10-02T21:40:45.578987Z INFO ExtHandler ExtHandler No requested version specified, checking for all versions for agent update (family: Prod) Oct 2 21:40:45.580151 waagent[1542]: 2023-10-02T21:40:45.580030Z INFO ExtHandler ExtHandler Downloading manifest Oct 2 21:40:45.605743 waagent[1542]: 2023-10-02T21:40:45.605661Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 21:40:45.605743 waagent[1542]: Executing ['ip', '-a', '-o', 'link']: Oct 2 21:40:45.605743 waagent[1542]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 21:40:45.605743 waagent[1542]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:7b:60:d5 brd ff:ff:ff:ff:ff:ff Oct 2 21:40:45.605743 waagent[1542]: 3: enP17733s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:7b:60:d5 brd ff:ff:ff:ff:ff:ff\ altname enP17733p0s2 Oct 2 21:40:45.605743 waagent[1542]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 21:40:45.605743 waagent[1542]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 21:40:45.605743 waagent[1542]: 2: eth0 inet 10.200.20.15/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 21:40:45.605743 waagent[1542]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 21:40:45.605743 waagent[1542]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 21:40:45.605743 waagent[1542]: 2: eth0 inet6 fe80::222:48ff:fe7b:60d5/64 scope link \ valid_lft forever preferred_lft forever Oct 2 21:40:45.623471 waagent[1542]: 2023-10-02T21:40:45.623391Z INFO ExtHandler ExtHandler Oct 2 21:40:45.623670 waagent[1542]: 2023-10-02T21:40:45.623596Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 67c03a30-6f17-416c-bc55-b636d0bae9f0 correlation 9cc0cb18-75c0-42d1-9896-2de973565022 created: 2023-10-02T21:39:24.518768Z] Oct 2 21:40:45.624775 waagent[1542]: 2023-10-02T21:40:45.624705Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 21:40:45.626785 waagent[1542]: 2023-10-02T21:40:45.626722Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 3 ms] Oct 2 21:40:45.649027 waagent[1542]: 2023-10-02T21:40:45.648947Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 21:40:45.675653 waagent[1542]: 2023-10-02T21:40:45.675573Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.9.1.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 4896D9E4-56E6-4BAB-AA7F-E814CF632548;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 21:40:45.792695 waagent[1542]: 2023-10-02T21:40:45.792520Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules. Current Firewall rules: Oct 2 21:40:45.792695 waagent[1542]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:40:45.792695 waagent[1542]: pkts bytes target prot opt in out source destination Oct 2 21:40:45.792695 waagent[1542]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:40:45.792695 waagent[1542]: pkts bytes target prot opt in out source destination Oct 2 21:40:45.792695 waagent[1542]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:40:45.792695 waagent[1542]: pkts bytes target prot opt in out source destination Oct 2 21:40:45.792695 waagent[1542]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 21:40:45.792695 waagent[1542]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 21:40:45.792695 waagent[1542]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 21:40:45.803089 waagent[1542]: 2023-10-02T21:40:45.802933Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 21:40:45.803089 waagent[1542]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:40:45.803089 waagent[1542]: pkts bytes target prot opt in out source destination Oct 2 21:40:45.803089 waagent[1542]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:40:45.803089 waagent[1542]: pkts bytes target prot opt in out source destination Oct 2 21:40:45.803089 waagent[1542]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 21:40:45.803089 waagent[1542]: pkts bytes target prot opt in out source destination Oct 2 21:40:45.803089 waagent[1542]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 21:40:45.803089 waagent[1542]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 21:40:45.803089 waagent[1542]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 21:40:45.803711 waagent[1542]: 2023-10-02T21:40:45.803655Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 21:41:11.900633 systemd-timesyncd[1299]: Contacted time server 162.159.200.1:123 (0.flatcar.pool.ntp.org). Oct 2 21:41:11.900700 systemd-timesyncd[1299]: Initial clock synchronization to Mon 2023-10-02 21:41:11.901538 UTC. Oct 2 21:41:13.785994 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Oct 2 21:41:18.379045 update_engine[1340]: I1002 21:41:18.379006 1340 update_attempter.cc:505] Updating boot flags... Oct 2 21:41:31.224257 systemd[1]: Created slice system-sshd.slice. Oct 2 21:41:31.225645 systemd[1]: Started sshd@0-10.200.20.15:22-10.200.12.6:54036.service. Oct 2 21:41:31.763159 sshd[1635]: Accepted publickey for core from 10.200.12.6 port 54036 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:41:31.776996 sshd[1635]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:41:31.780809 systemd-logind[1339]: New session 3 of user core. Oct 2 21:41:31.781593 systemd[1]: Started session-3.scope. Oct 2 21:41:32.112954 systemd[1]: Started sshd@1-10.200.20.15:22-10.200.12.6:54048.service. Oct 2 21:41:32.507791 sshd[1640]: Accepted publickey for core from 10.200.12.6 port 54048 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:41:32.509480 sshd[1640]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:41:32.513456 systemd-logind[1339]: New session 4 of user core. Oct 2 21:41:32.513847 systemd[1]: Started session-4.scope. Oct 2 21:41:32.801423 sshd[1640]: pam_unix(sshd:session): session closed for user core Oct 2 21:41:32.804733 systemd-logind[1339]: Session 4 logged out. Waiting for processes to exit. Oct 2 21:41:32.805306 systemd[1]: sshd@1-10.200.20.15:22-10.200.12.6:54048.service: Deactivated successfully. Oct 2 21:41:32.805969 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 21:41:32.806559 systemd-logind[1339]: Removed session 4. Oct 2 21:41:32.868472 systemd[1]: Started sshd@2-10.200.20.15:22-10.200.12.6:54064.service. Oct 2 21:41:33.262933 sshd[1646]: Accepted publickey for core from 10.200.12.6 port 54064 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:41:33.264495 sshd[1646]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:41:33.268752 systemd[1]: Started session-5.scope. Oct 2 21:41:33.269050 systemd-logind[1339]: New session 5 of user core. Oct 2 21:41:33.550152 sshd[1646]: pam_unix(sshd:session): session closed for user core Oct 2 21:41:33.553019 systemd[1]: sshd@2-10.200.20.15:22-10.200.12.6:54064.service: Deactivated successfully. Oct 2 21:41:33.553732 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 21:41:33.554270 systemd-logind[1339]: Session 5 logged out. Waiting for processes to exit. Oct 2 21:41:33.555079 systemd-logind[1339]: Removed session 5. Oct 2 21:41:33.616504 systemd[1]: Started sshd@3-10.200.20.15:22-10.200.12.6:54080.service. Oct 2 21:41:34.010319 sshd[1652]: Accepted publickey for core from 10.200.12.6 port 54080 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:41:34.011852 sshd[1652]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:41:34.015719 systemd-logind[1339]: New session 6 of user core. Oct 2 21:41:34.016131 systemd[1]: Started session-6.scope. Oct 2 21:41:34.304379 sshd[1652]: pam_unix(sshd:session): session closed for user core Oct 2 21:41:34.307188 systemd-logind[1339]: Session 6 logged out. Waiting for processes to exit. Oct 2 21:41:34.307275 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 21:41:34.308164 systemd[1]: sshd@3-10.200.20.15:22-10.200.12.6:54080.service: Deactivated successfully. Oct 2 21:41:34.308893 systemd-logind[1339]: Removed session 6. Oct 2 21:41:34.370928 systemd[1]: Started sshd@4-10.200.20.15:22-10.200.12.6:54088.service. Oct 2 21:41:34.767776 sshd[1658]: Accepted publickey for core from 10.200.12.6 port 54088 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:41:34.769386 sshd[1658]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:41:34.773439 systemd-logind[1339]: New session 7 of user core. Oct 2 21:41:34.773824 systemd[1]: Started session-7.scope. Oct 2 21:41:35.261460 sudo[1661]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 21:41:35.261986 sudo[1661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:41:35.294367 dbus-daemon[1324]: avc: received setenforce notice (enforcing=1) Oct 2 21:41:35.296204 sudo[1661]: pam_unix(sudo:session): session closed for user root Oct 2 21:41:35.369870 sshd[1658]: pam_unix(sshd:session): session closed for user core Oct 2 21:41:35.372978 systemd-logind[1339]: Session 7 logged out. Waiting for processes to exit. Oct 2 21:41:35.373689 systemd[1]: sshd@4-10.200.20.15:22-10.200.12.6:54088.service: Deactivated successfully. Oct 2 21:41:35.374419 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 21:41:35.375113 systemd-logind[1339]: Removed session 7. Oct 2 21:41:35.436725 systemd[1]: Started sshd@5-10.200.20.15:22-10.200.12.6:54104.service. Oct 2 21:41:35.831865 sshd[1665]: Accepted publickey for core from 10.200.12.6 port 54104 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:41:35.833789 sshd[1665]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:41:35.837583 systemd-logind[1339]: New session 8 of user core. Oct 2 21:41:35.838028 systemd[1]: Started session-8.scope. Oct 2 21:41:36.063156 sudo[1669]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 21:41:36.063687 sudo[1669]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:41:36.067088 sudo[1669]: pam_unix(sudo:session): session closed for user root Oct 2 21:41:36.073458 sudo[1668]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 21:41:36.073652 sudo[1668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:41:36.084325 systemd[1]: Stopping audit-rules.service... Oct 2 21:41:36.085000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 21:41:36.089352 auditctl[1672]: No rules Oct 2 21:41:36.091022 kernel: kauditd_printk_skb: 82 callbacks suppressed Oct 2 21:41:36.091082 kernel: audit: type=1305 audit(1696282896.085:163): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 21:41:36.091371 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 21:41:36.091547 systemd[1]: Stopped audit-rules.service. Oct 2 21:41:36.093292 systemd[1]: Starting audit-rules.service... Oct 2 21:41:36.085000 audit[1672]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffffa4e41c0 a2=420 a3=0 items=0 ppid=1 pid=1672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:36.127992 kernel: audit: type=1300 audit(1696282896.085:163): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffffa4e41c0 a2=420 a3=0 items=0 ppid=1 pid=1672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:36.085000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 21:41:36.135927 kernel: audit: type=1327 audit(1696282896.085:163): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 21:41:36.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:36.153585 kernel: audit: type=1131 audit(1696282896.090:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:36.163790 augenrules[1689]: No rules Oct 2 21:41:36.164822 systemd[1]: Finished audit-rules.service. Oct 2 21:41:36.163000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:36.167107 sudo[1668]: pam_unix(sudo:session): session closed for user root Oct 2 21:41:36.165000 audit[1668]: USER_END pid=1668 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:41:36.204565 kernel: audit: type=1130 audit(1696282896.163:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:36.204625 kernel: audit: type=1106 audit(1696282896.165:166): pid=1668 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:41:36.166000 audit[1668]: CRED_DISP pid=1668 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:41:36.222733 kernel: audit: type=1104 audit(1696282896.166:167): pid=1668 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:41:36.230426 sshd[1665]: pam_unix(sshd:session): session closed for user core Oct 2 21:41:36.230000 audit[1665]: USER_END pid=1665 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:41:36.233287 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 21:41:36.234117 systemd[1]: sshd@5-10.200.20.15:22-10.200.12.6:54104.service: Deactivated successfully. Oct 2 21:41:36.230000 audit[1665]: CRED_DISP pid=1665 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:41:36.273886 kernel: audit: type=1106 audit(1696282896.230:168): pid=1665 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:41:36.273953 kernel: audit: type=1104 audit(1696282896.230:169): pid=1665 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:41:36.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.15:22-10.200.12.6:54104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:36.274063 systemd-logind[1339]: Session 8 logged out. Waiting for processes to exit. Oct 2 21:41:36.293928 kernel: audit: type=1131 audit(1696282896.233:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.15:22-10.200.12.6:54104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:36.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.15:22-10.200.12.6:54120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:36.298166 systemd[1]: Started sshd@6-10.200.20.15:22-10.200.12.6:54120.service. Oct 2 21:41:36.299445 systemd-logind[1339]: Removed session 8. Oct 2 21:41:36.692000 audit[1695]: USER_ACCT pid=1695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:41:36.693460 sshd[1695]: Accepted publickey for core from 10.200.12.6 port 54120 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:41:36.693000 audit[1695]: CRED_ACQ pid=1695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:41:36.693000 audit[1695]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6a27f50 a2=3 a3=1 items=0 ppid=1 pid=1695 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:36.693000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:41:36.695368 sshd[1695]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:41:36.699589 systemd[1]: Started session-9.scope. Oct 2 21:41:36.699902 systemd-logind[1339]: New session 9 of user core. Oct 2 21:41:36.702000 audit[1695]: USER_START pid=1695 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:41:36.705000 audit[1697]: CRED_ACQ pid=1697 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:41:36.923000 audit[1698]: USER_ACCT pid=1698 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:41:36.924733 sudo[1698]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 21:41:36.923000 audit[1698]: CRED_REFR pid=1698 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:41:36.924932 sudo[1698]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 21:41:36.925000 audit[1698]: USER_START pid=1698 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:41:37.840533 systemd[1]: Starting docker.service... Oct 2 21:41:37.886637 env[1713]: time="2023-10-02T21:41:37.886588534Z" level=info msg="Starting up" Oct 2 21:41:37.888440 env[1713]: time="2023-10-02T21:41:37.888410958Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 21:41:37.888440 env[1713]: time="2023-10-02T21:41:37.888433158Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 21:41:37.888549 env[1713]: time="2023-10-02T21:41:37.888450838Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 21:41:37.888549 env[1713]: time="2023-10-02T21:41:37.888462238Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 21:41:37.891005 env[1713]: time="2023-10-02T21:41:37.890981551Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 21:41:37.891126 env[1713]: time="2023-10-02T21:41:37.891113633Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 21:41:37.891221 env[1713]: time="2023-10-02T21:41:37.891204594Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 21:41:37.891283 env[1713]: time="2023-10-02T21:41:37.891271075Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 21:41:38.034001 env[1713]: time="2023-10-02T21:41:38.033938354Z" level=info msg="Loading containers: start." Oct 2 21:41:38.113000 audit[1741]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=1741 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.113000 audit[1741]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffe8b4d150 a2=0 a3=1 items=0 ppid=1713 pid=1741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.113000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 21:41:38.116000 audit[1743]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=1743 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.116000 audit[1743]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffff50a8910 a2=0 a3=1 items=0 ppid=1713 pid=1743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.116000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 21:41:38.119000 audit[1745]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=1745 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.119000 audit[1745]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffca5f0ad0 a2=0 a3=1 items=0 ppid=1713 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.119000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 21:41:38.122000 audit[1747]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1747 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.122000 audit[1747]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffef5200f0 a2=0 a3=1 items=0 ppid=1713 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.122000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 21:41:38.125000 audit[1749]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1749 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.125000 audit[1749]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe53fb160 a2=0 a3=1 items=0 ppid=1713 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.125000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 21:41:38.128000 audit[1751]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1751 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.128000 audit[1751]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd2249a10 a2=0 a3=1 items=0 ppid=1713 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.128000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 21:41:38.146000 audit[1753]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1753 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.146000 audit[1753]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd3b3c990 a2=0 a3=1 items=0 ppid=1713 pid=1753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.146000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 21:41:38.149000 audit[1755]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1755 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.149000 audit[1755]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe7d15430 a2=0 a3=1 items=0 ppid=1713 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.149000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 21:41:38.152000 audit[1757]: NETFILTER_CFG table=filter:13 family=2 entries=2 op=nft_register_chain pid=1757 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.152000 audit[1757]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffef7f9180 a2=0 a3=1 items=0 ppid=1713 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.152000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:41:38.172000 audit[1761]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_unregister_rule pid=1761 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.172000 audit[1761]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffffabe6600 a2=0 a3=1 items=0 ppid=1713 pid=1761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.172000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:41:38.174000 audit[1762]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1762 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.174000 audit[1762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffcf40f110 a2=0 a3=1 items=0 ppid=1713 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.174000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:41:38.205217 kernel: Initializing XFRM netlink socket Oct 2 21:41:38.223918 env[1713]: time="2023-10-02T21:41:38.223872083Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 21:41:38.283000 audit[1770]: NETFILTER_CFG table=nat:16 family=2 entries=2 op=nft_register_chain pid=1770 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.283000 audit[1770]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffebb80dc0 a2=0 a3=1 items=0 ppid=1713 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.283000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 21:41:38.307000 audit[1773]: NETFILTER_CFG table=nat:17 family=2 entries=1 op=nft_register_rule pid=1773 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.307000 audit[1773]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc8fb6e80 a2=0 a3=1 items=0 ppid=1713 pid=1773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.307000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 21:41:38.312000 audit[1776]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_register_rule pid=1776 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.312000 audit[1776]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc3f2d990 a2=0 a3=1 items=0 ppid=1713 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.312000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 21:41:38.315000 audit[1778]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1778 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.315000 audit[1778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff5c55e30 a2=0 a3=1 items=0 ppid=1713 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.315000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 21:41:38.317000 audit[1780]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1780 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.317000 audit[1780]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffff9b68940 a2=0 a3=1 items=0 ppid=1713 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.317000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 21:41:38.320000 audit[1782]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1782 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.320000 audit[1782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffff71c1bd0 a2=0 a3=1 items=0 ppid=1713 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.320000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 21:41:38.323000 audit[1784]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1784 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.323000 audit[1784]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffcc8c8aa0 a2=0 a3=1 items=0 ppid=1713 pid=1784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.323000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 21:41:38.326000 audit[1786]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1786 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.326000 audit[1786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffea9f7500 a2=0 a3=1 items=0 ppid=1713 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.326000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 21:41:38.328000 audit[1788]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1788 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.328000 audit[1788]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffd3a3ce80 a2=0 a3=1 items=0 ppid=1713 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.328000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 21:41:38.331000 audit[1790]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1790 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.331000 audit[1790]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffcdff2450 a2=0 a3=1 items=0 ppid=1713 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.331000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 21:41:38.334000 audit[1792]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1792 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.334000 audit[1792]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc06f9a90 a2=0 a3=1 items=0 ppid=1713 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.334000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 21:41:38.336534 systemd-networkd[1499]: docker0: Link UP Oct 2 21:41:38.357000 audit[1796]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_unregister_rule pid=1796 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.357000 audit[1796]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffce5582c0 a2=0 a3=1 items=0 ppid=1713 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.357000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:41:38.358000 audit[1797]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1797 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:41:38.358000 audit[1797]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffc6e7d1b0 a2=0 a3=1 items=0 ppid=1713 pid=1797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:41:38.358000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 21:41:38.360350 env[1713]: time="2023-10-02T21:41:38.360324556Z" level=info msg="Loading containers: done." Oct 2 21:41:38.373532 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2145907703-merged.mount: Deactivated successfully. Oct 2 21:41:38.431381 env[1713]: time="2023-10-02T21:41:38.431336546Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 21:41:38.431568 env[1713]: time="2023-10-02T21:41:38.431543829Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 21:41:38.431688 env[1713]: time="2023-10-02T21:41:38.431654190Z" level=info msg="Daemon has completed initialization" Oct 2 21:41:38.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:38.469400 systemd[1]: Started docker.service. Oct 2 21:41:38.472432 env[1713]: time="2023-10-02T21:41:38.472372170Z" level=info msg="API listen on /run/docker.sock" Oct 2 21:41:38.494584 systemd[1]: Reloading. Oct 2 21:41:38.581440 /usr/lib/systemd/system-generators/torcx-generator[1844]: time="2023-10-02T21:41:38Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:41:38.581468 /usr/lib/systemd/system-generators/torcx-generator[1844]: time="2023-10-02T21:41:38Z" level=info msg="torcx already run" Oct 2 21:41:38.686116 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:41:38.686135 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:41:38.701221 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit: BPF prog-id=32 op=LOAD Oct 2 21:41:38.766000 audit: BPF prog-id=31 op=UNLOAD Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.766000 audit: BPF prog-id=33 op=LOAD Oct 2 21:41:38.767000 audit: BPF prog-id=25 op=UNLOAD Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit: BPF prog-id=34 op=LOAD Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.767000 audit: BPF prog-id=35 op=LOAD Oct 2 21:41:38.767000 audit: BPF prog-id=18 op=UNLOAD Oct 2 21:41:38.767000 audit: BPF prog-id=19 op=UNLOAD Oct 2 21:41:38.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.768000 audit: BPF prog-id=36 op=LOAD Oct 2 21:41:38.768000 audit: BPF prog-id=29 op=UNLOAD Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit: BPF prog-id=37 op=LOAD Oct 2 21:41:38.769000 audit: BPF prog-id=26 op=UNLOAD Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit: BPF prog-id=38 op=LOAD Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.769000 audit: BPF prog-id=39 op=LOAD Oct 2 21:41:38.769000 audit: BPF prog-id=27 op=UNLOAD Oct 2 21:41:38.769000 audit: BPF prog-id=28 op=UNLOAD Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit: BPF prog-id=40 op=LOAD Oct 2 21:41:38.770000 audit: BPF prog-id=21 op=UNLOAD Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit: BPF prog-id=41 op=LOAD Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.770000 audit: BPF prog-id=42 op=LOAD Oct 2 21:41:38.770000 audit: BPF prog-id=22 op=UNLOAD Oct 2 21:41:38.770000 audit: BPF prog-id=23 op=UNLOAD Oct 2 21:41:38.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.772000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.772000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.772000 audit: BPF prog-id=43 op=LOAD Oct 2 21:41:38.772000 audit: BPF prog-id=24 op=UNLOAD Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit: BPF prog-id=44 op=LOAD Oct 2 21:41:38.773000 audit: BPF prog-id=15 op=UNLOAD Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit: BPF prog-id=45 op=LOAD Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:41:38.773000 audit: BPF prog-id=46 op=LOAD Oct 2 21:41:38.773000 audit: BPF prog-id=16 op=UNLOAD Oct 2 21:41:38.773000 audit: BPF prog-id=17 op=UNLOAD Oct 2 21:41:38.782059 systemd[1]: Started kubelet.service. Oct 2 21:41:38.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:38.862975 kubelet[1903]: E1002 21:41:38.862914 1903 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 21:41:38.865350 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:41:38.865477 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:41:38.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:41:42.538407 env[1351]: time="2023-10-02T21:41:42.538366177Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 21:41:43.497387 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2219533251.mount: Deactivated successfully. Oct 2 21:41:46.293444 env[1351]: time="2023-10-02T21:41:46.293395752Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:46.299511 env[1351]: time="2023-10-02T21:41:46.299472116Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:46.303583 env[1351]: time="2023-10-02T21:41:46.303534506Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:46.308957 env[1351]: time="2023-10-02T21:41:46.308913145Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:46.309755 env[1351]: time="2023-10-02T21:41:46.309729431Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99\"" Oct 2 21:41:46.323307 env[1351]: time="2023-10-02T21:41:46.323271770Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 21:41:49.097473 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 21:41:49.119060 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 21:41:49.119105 kernel: audit: type=1130 audit(1696282909.096:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:49.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:49.097650 systemd[1]: Stopped kubelet.service. Oct 2 21:41:49.102245 systemd[1]: Started kubelet.service. Oct 2 21:41:49.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:49.137197 kernel: audit: type=1131 audit(1696282909.096:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:49.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:49.154873 kernel: audit: type=1130 audit(1696282909.101:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:49.245649 kubelet[1925]: E1002 21:41:49.245596 1925 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 21:41:49.248673 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:41:49.248812 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:41:49.247000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:41:49.268204 kernel: audit: type=1131 audit(1696282909.247:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:41:49.496289 env[1351]: time="2023-10-02T21:41:49.495642699Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:49.504287 env[1351]: time="2023-10-02T21:41:49.504235351Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:49.509973 env[1351]: time="2023-10-02T21:41:49.509936465Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:49.514148 env[1351]: time="2023-10-02T21:41:49.514102490Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:49.514930 env[1351]: time="2023-10-02T21:41:49.514902895Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013\"" Oct 2 21:41:49.529655 env[1351]: time="2023-10-02T21:41:49.529618584Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 21:41:52.010088 env[1351]: time="2023-10-02T21:41:52.010040796Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:52.015263 env[1351]: time="2023-10-02T21:41:52.015229902Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:52.019877 env[1351]: time="2023-10-02T21:41:52.019835045Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:52.023084 env[1351]: time="2023-10-02T21:41:52.023048141Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:52.023839 env[1351]: time="2023-10-02T21:41:52.023812145Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803\"" Oct 2 21:41:52.038163 env[1351]: time="2023-10-02T21:41:52.038118016Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 21:41:53.072509 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3558239330.mount: Deactivated successfully. Oct 2 21:41:53.898418 env[1351]: time="2023-10-02T21:41:53.898369898Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:53.907077 env[1351]: time="2023-10-02T21:41:53.907031058Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:53.911261 env[1351]: time="2023-10-02T21:41:53.911227237Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:53.916199 env[1351]: time="2023-10-02T21:41:53.916144620Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:53.916461 env[1351]: time="2023-10-02T21:41:53.916433982Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343\"" Oct 2 21:41:53.929669 env[1351]: time="2023-10-02T21:41:53.929633123Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 21:41:54.583015 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1380160176.mount: Deactivated successfully. Oct 2 21:41:54.606369 env[1351]: time="2023-10-02T21:41:54.606317738Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:54.614203 env[1351]: time="2023-10-02T21:41:54.614148812Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:54.618273 env[1351]: time="2023-10-02T21:41:54.618234990Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:54.622905 env[1351]: time="2023-10-02T21:41:54.622858890Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:54.623555 env[1351]: time="2023-10-02T21:41:54.623527773Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 21:41:54.637055 env[1351]: time="2023-10-02T21:41:54.637018552Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 21:41:55.653541 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount717251953.mount: Deactivated successfully. Oct 2 21:41:59.347467 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 21:41:59.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:59.347644 systemd[1]: Stopped kubelet.service. Oct 2 21:41:59.349157 systemd[1]: Started kubelet.service. Oct 2 21:41:59.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:59.387441 kernel: audit: type=1130 audit(1696282919.346:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:59.387678 kernel: audit: type=1131 audit(1696282919.346:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:59.387707 kernel: audit: type=1130 audit(1696282919.348:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:59.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:41:59.464068 kubelet[1954]: E1002 21:41:59.464013 1954 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 21:41:59.465000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:41:59.466780 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 21:41:59.466914 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 21:41:59.485202 kernel: audit: type=1131 audit(1696282919.465:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 21:41:59.758287 env[1351]: time="2023-10-02T21:41:59.757680522Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:59.764020 env[1351]: time="2023-10-02T21:41:59.763979222Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:59.767875 env[1351]: time="2023-10-02T21:41:59.767834274Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:59.772418 env[1351]: time="2023-10-02T21:41:59.772376529Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:41:59.773036 env[1351]: time="2023-10-02T21:41:59.773002851Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 21:41:59.786844 env[1351]: time="2023-10-02T21:41:59.786776614Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 21:42:00.622171 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3535054657.mount: Deactivated successfully. Oct 2 21:42:01.804477 env[1351]: time="2023-10-02T21:42:01.804425530Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:01.815210 env[1351]: time="2023-10-02T21:42:01.815144919Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:01.820275 env[1351]: time="2023-10-02T21:42:01.820238854Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:01.825819 env[1351]: time="2023-10-02T21:42:01.825770669Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:01.826439 env[1351]: time="2023-10-02T21:42:01.826411951Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 21:42:06.366441 systemd[1]: Stopped kubelet.service. Oct 2 21:42:06.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:42:06.365000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:42:06.402850 kernel: audit: type=1130 audit(1696282926.365:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:42:06.402940 kernel: audit: type=1131 audit(1696282926.365:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:42:06.423776 systemd[1]: Reloading. Oct 2 21:42:06.522580 /usr/lib/systemd/system-generators/torcx-generator[2042]: time="2023-10-02T21:42:06Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:42:06.522608 /usr/lib/systemd/system-generators/torcx-generator[2042]: time="2023-10-02T21:42:06Z" level=info msg="torcx already run" Oct 2 21:42:06.627622 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:42:06.627998 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:42:06.643398 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:42:06.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.747711 kernel: audit: type=1400 audit(1696282926.708:389): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.747800 kernel: audit: type=1400 audit(1696282926.708:390): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.747827 kernel: audit: type=1400 audit(1696282926.708:391): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.770304 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 21:42:06.770404 kernel: audit: type=1400 audit(1696282926.708:392): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.787412 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 21:42:06.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.811404 kernel: audit: type=1400 audit(1696282926.708:393): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.811518 kernel: audit: backlog limit exceeded Oct 2 21:42:06.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.708000 audit: BPF prog-id=47 op=LOAD Oct 2 21:42:06.709000 audit: BPF prog-id=32 op=UNLOAD Oct 2 21:42:06.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.726000 audit: BPF prog-id=48 op=LOAD Oct 2 21:42:06.726000 audit: BPF prog-id=33 op=UNLOAD Oct 2 21:42:06.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.726000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.726000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.726000 audit: BPF prog-id=49 op=LOAD Oct 2 21:42:06.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.727000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.727000 audit: BPF prog-id=50 op=LOAD Oct 2 21:42:06.727000 audit: BPF prog-id=34 op=UNLOAD Oct 2 21:42:06.727000 audit: BPF prog-id=35 op=UNLOAD Oct 2 21:42:06.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.728000 audit: BPF prog-id=51 op=LOAD Oct 2 21:42:06.728000 audit: BPF prog-id=36 op=UNLOAD Oct 2 21:42:06.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit: BPF prog-id=37 op=UNLOAD Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit: BPF prog-id=53 op=LOAD Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.814000 audit: BPF prog-id=54 op=LOAD Oct 2 21:42:06.814000 audit: BPF prog-id=38 op=UNLOAD Oct 2 21:42:06.814000 audit: BPF prog-id=39 op=UNLOAD Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit: BPF prog-id=55 op=LOAD Oct 2 21:42:06.815000 audit: BPF prog-id=40 op=UNLOAD Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit: BPF prog-id=56 op=LOAD Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.815000 audit: BPF prog-id=57 op=LOAD Oct 2 21:42:06.815000 audit: BPF prog-id=41 op=UNLOAD Oct 2 21:42:06.815000 audit: BPF prog-id=42 op=UNLOAD Oct 2 21:42:06.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.817000 audit: BPF prog-id=58 op=LOAD Oct 2 21:42:06.817000 audit: BPF prog-id=43 op=UNLOAD Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit: BPF prog-id=59 op=LOAD Oct 2 21:42:06.818000 audit: BPF prog-id=44 op=UNLOAD Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit: BPF prog-id=60 op=LOAD Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:06.818000 audit: BPF prog-id=61 op=LOAD Oct 2 21:42:06.818000 audit: BPF prog-id=45 op=UNLOAD Oct 2 21:42:06.818000 audit: BPF prog-id=46 op=UNLOAD Oct 2 21:42:06.835128 systemd[1]: Started kubelet.service. Oct 2 21:42:06.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:42:06.902770 kubelet[2102]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 21:42:06.902770 kubelet[2102]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:42:06.902770 kubelet[2102]: I1002 21:42:06.901419 2102 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 21:42:06.903525 kubelet[2102]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 21:42:06.903525 kubelet[2102]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:42:07.281391 kubelet[2102]: I1002 21:42:07.281112 2102 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 21:42:07.281524 kubelet[2102]: I1002 21:42:07.281509 2102 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 21:42:07.281830 kubelet[2102]: I1002 21:42:07.281816 2102 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 21:42:07.285210 kubelet[2102]: E1002 21:42:07.285161 2102 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.20.15:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:07.285302 kubelet[2102]: I1002 21:42:07.285225 2102 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 21:42:07.287355 kubelet[2102]: W1002 21:42:07.287339 2102 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 21:42:07.287943 kubelet[2102]: I1002 21:42:07.287929 2102 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 21:42:07.288337 kubelet[2102]: I1002 21:42:07.288324 2102 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 21:42:07.288465 kubelet[2102]: I1002 21:42:07.288454 2102 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 21:42:07.288611 kubelet[2102]: I1002 21:42:07.288601 2102 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 21:42:07.288673 kubelet[2102]: I1002 21:42:07.288665 2102 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 21:42:07.288838 kubelet[2102]: I1002 21:42:07.288827 2102 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:42:07.295599 kubelet[2102]: I1002 21:42:07.295574 2102 kubelet.go:398] "Attempting to sync node with API server" Oct 2 21:42:07.295787 kubelet[2102]: I1002 21:42:07.295776 2102 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 21:42:07.295937 kubelet[2102]: I1002 21:42:07.295925 2102 kubelet.go:297] "Adding apiserver pod source" Oct 2 21:42:07.295999 kubelet[2102]: I1002 21:42:07.295990 2102 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 21:42:07.296454 kubelet[2102]: W1002 21:42:07.296408 2102 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-21920721f7&limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:07.296538 kubelet[2102]: E1002 21:42:07.296461 2102 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-21920721f7&limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:07.297555 kubelet[2102]: W1002 21:42:07.297509 2102 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:07.297555 kubelet[2102]: E1002 21:42:07.297557 2102 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:07.297665 kubelet[2102]: I1002 21:42:07.297641 2102 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 21:42:07.298137 kubelet[2102]: W1002 21:42:07.298104 2102 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 21:42:07.298561 kubelet[2102]: I1002 21:42:07.298532 2102 server.go:1186] "Started kubelet" Oct 2 21:42:07.298000 audit[2102]: AVC avc: denied { mac_admin } for pid=2102 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:07.298000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:42:07.298000 audit[2102]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000dbf4d0 a1=4000788e88 a2=4000dbf4a0 a3=25 items=0 ppid=1 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.298000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:42:07.299000 audit[2102]: AVC avc: denied { mac_admin } for pid=2102 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:07.299000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:42:07.299000 audit[2102]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000eff420 a1=4000788ea0 a2=4000dbf560 a3=25 items=0 ppid=1 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.299000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:42:07.300560 kubelet[2102]: I1002 21:42:07.300230 2102 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 21:42:07.300560 kubelet[2102]: I1002 21:42:07.300263 2102 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 21:42:07.300560 kubelet[2102]: I1002 21:42:07.300323 2102 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 21:42:07.302869 kubelet[2102]: E1002 21:42:07.302851 2102 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 21:42:07.302976 kubelet[2102]: E1002 21:42:07.302965 2102 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 21:42:07.303360 kubelet[2102]: E1002 21:42:07.303281 2102 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-21920721f7.178a6855c82ff8b0", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-21920721f7", UID:"ci-3510.3.0-a-21920721f7", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-21920721f7"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 298508976, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 298508976, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.20.15:6443/api/v1/namespaces/default/events": dial tcp 10.200.20.15:6443: connect: connection refused'(may retry after sleeping) Oct 2 21:42:07.304697 kubelet[2102]: I1002 21:42:07.304682 2102 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 21:42:07.305423 kubelet[2102]: I1002 21:42:07.305406 2102 server.go:451] "Adding debug handlers to kubelet server" Oct 2 21:42:07.308418 kubelet[2102]: I1002 21:42:07.308400 2102 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 21:42:07.308568 kubelet[2102]: I1002 21:42:07.308555 2102 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 21:42:07.307000 audit[2112]: NETFILTER_CFG table=mangle:29 family=2 entries=2 op=nft_register_chain pid=2112 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.307000 audit[2112]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffedfa4820 a2=0 a3=1 items=0 ppid=2102 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.307000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 21:42:07.309320 kubelet[2102]: W1002 21:42:07.309281 2102 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:07.309416 kubelet[2102]: E1002 21:42:07.309406 2102 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:07.309943 kubelet[2102]: E1002 21:42:07.309889 2102 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.200.20.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-21920721f7?timeout=10s": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:07.310000 audit[2113]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=2113 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.310000 audit[2113]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe9335ec0 a2=0 a3=1 items=0 ppid=2102 pid=2113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.310000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 21:42:07.315000 audit[2115]: NETFILTER_CFG table=filter:31 family=2 entries=2 op=nft_register_chain pid=2115 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.315000 audit[2115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff5439cb0 a2=0 a3=1 items=0 ppid=2102 pid=2115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.315000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 21:42:07.318000 audit[2117]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2117 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.318000 audit[2117]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe5882b10 a2=0 a3=1 items=0 ppid=2102 pid=2117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.318000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 21:42:07.349000 audit[2124]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2124 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.349000 audit[2124]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffc7b18c80 a2=0 a3=1 items=0 ppid=2102 pid=2124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.349000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 21:42:07.351000 audit[2125]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2125 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.351000 audit[2125]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc8548ba0 a2=0 a3=1 items=0 ppid=2102 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.351000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 21:42:07.378000 audit[2128]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_rule pid=2128 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.378000 audit[2128]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff1799720 a2=0 a3=1 items=0 ppid=2102 pid=2128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.378000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 21:42:07.412744 kubelet[2102]: I1002 21:42:07.412715 2102 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-21920721f7" Oct 2 21:42:07.413061 kubelet[2102]: E1002 21:42:07.413033 2102 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.15:6443/api/v1/nodes\": dial tcp 10.200.20.15:6443: connect: connection refused" node="ci-3510.3.0-a-21920721f7" Oct 2 21:42:07.413396 kubelet[2102]: I1002 21:42:07.413375 2102 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 21:42:07.413396 kubelet[2102]: I1002 21:42:07.413389 2102 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 21:42:07.413491 kubelet[2102]: I1002 21:42:07.413407 2102 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:42:07.418526 kubelet[2102]: I1002 21:42:07.418497 2102 policy_none.go:49] "None policy: Start" Oct 2 21:42:07.419069 kubelet[2102]: I1002 21:42:07.419046 2102 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 21:42:07.419069 kubelet[2102]: I1002 21:42:07.419070 2102 state_mem.go:35] "Initializing new in-memory state store" Oct 2 21:42:07.419000 audit[2131]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_rule pid=2131 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.419000 audit[2131]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffdc4bd8a0 a2=0 a3=1 items=0 ppid=2102 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.419000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 21:42:07.421000 audit[2132]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_chain pid=2132 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.421000 audit[2132]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffec023900 a2=0 a3=1 items=0 ppid=2102 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.421000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 21:42:07.423000 audit[2133]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2133 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.423000 audit[2133]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffee00390 a2=0 a3=1 items=0 ppid=2102 pid=2133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.423000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 21:42:07.427092 systemd[1]: Created slice kubepods.slice. Oct 2 21:42:07.431172 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 21:42:07.431000 audit[2136]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=2136 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.431000 audit[2136]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe0e9d970 a2=0 a3=1 items=0 ppid=2102 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.431000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 21:42:07.434069 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 21:42:07.438753 kubelet[2102]: I1002 21:42:07.438733 2102 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 21:42:07.437000 audit[2102]: AVC avc: denied { mac_admin } for pid=2102 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:07.437000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:42:07.437000 audit[2102]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ea96e0 a1=400110ed80 a2=4000ea96b0 a3=25 items=0 ppid=1 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.438000 audit[2138]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2138 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.438000 audit[2138]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffd86df040 a2=0 a3=1 items=0 ppid=2102 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.438000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 21:42:07.437000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:42:07.440209 kubelet[2102]: I1002 21:42:07.440168 2102 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 21:42:07.440666 kubelet[2102]: I1002 21:42:07.440650 2102 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 21:42:07.441838 kubelet[2102]: E1002 21:42:07.441754 2102 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-21920721f7\" not found" Oct 2 21:42:07.443000 audit[2140]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_rule pid=2140 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.443000 audit[2140]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffff297af0 a2=0 a3=1 items=0 ppid=2102 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.443000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 21:42:07.446000 audit[2142]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_rule pid=2142 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.446000 audit[2142]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=fffff51db410 a2=0 a3=1 items=0 ppid=2102 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.446000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 21:42:07.450000 audit[2144]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_rule pid=2144 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.450000 audit[2144]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=540 a0=3 a1=fffffd7de510 a2=0 a3=1 items=0 ppid=2102 pid=2144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.450000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 21:42:07.451633 kubelet[2102]: I1002 21:42:07.451610 2102 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 21:42:07.452000 audit[2146]: NETFILTER_CFG table=mangle:44 family=2 entries=1 op=nft_register_chain pid=2146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.452000 audit[2146]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff974bf60 a2=0 a3=1 items=0 ppid=2102 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.452000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 21:42:07.452000 audit[2145]: NETFILTER_CFG table=mangle:45 family=10 entries=2 op=nft_register_chain pid=2145 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:07.452000 audit[2145]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd6ef5ef0 a2=0 a3=1 items=0 ppid=2102 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.452000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 21:42:07.453000 audit[2147]: NETFILTER_CFG table=nat:46 family=2 entries=1 op=nft_register_chain pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.453000 audit[2147]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdd5311c0 a2=0 a3=1 items=0 ppid=2102 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.453000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 21:42:07.454000 audit[2148]: NETFILTER_CFG table=nat:47 family=10 entries=2 op=nft_register_chain pid=2148 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:07.454000 audit[2148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffddae3a80 a2=0 a3=1 items=0 ppid=2102 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.454000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 21:42:07.455000 audit[2149]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:07.455000 audit[2149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd26b1680 a2=0 a3=1 items=0 ppid=2102 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.455000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 21:42:07.458000 audit[2151]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_rule pid=2151 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:07.458000 audit[2151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffffd27e5b0 a2=0 a3=1 items=0 ppid=2102 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.458000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 21:42:07.460000 audit[2152]: NETFILTER_CFG table=filter:50 family=10 entries=2 op=nft_register_chain pid=2152 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:07.460000 audit[2152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffc1b7c5d0 a2=0 a3=1 items=0 ppid=2102 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.460000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 21:42:07.463000 audit[2154]: NETFILTER_CFG table=filter:51 family=10 entries=1 op=nft_register_rule pid=2154 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:07.463000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffde565550 a2=0 a3=1 items=0 ppid=2102 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.463000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 21:42:07.465000 audit[2155]: NETFILTER_CFG table=nat:52 family=10 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:07.465000 audit[2155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe880c230 a2=0 a3=1 items=0 ppid=2102 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.465000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 21:42:07.466000 audit[2156]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_chain pid=2156 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:07.466000 audit[2156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc48d29f0 a2=0 a3=1 items=0 ppid=2102 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.466000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 21:42:07.469000 audit[2158]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=2158 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:07.469000 audit[2158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc91b80b0 a2=0 a3=1 items=0 ppid=2102 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.469000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 21:42:07.472000 audit[2160]: NETFILTER_CFG table=nat:55 family=10 entries=2 op=nft_register_chain pid=2160 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:07.472000 audit[2160]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffd68eacc0 a2=0 a3=1 items=0 ppid=2102 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.472000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 21:42:07.476000 audit[2162]: NETFILTER_CFG table=nat:56 family=10 entries=1 op=nft_register_rule pid=2162 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:07.476000 audit[2162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffd66cd190 a2=0 a3=1 items=0 ppid=2102 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.476000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 21:42:07.479000 audit[2164]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_rule pid=2164 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:07.479000 audit[2164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffc92780b0 a2=0 a3=1 items=0 ppid=2102 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.479000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 21:42:07.494000 audit[2166]: NETFILTER_CFG table=nat:58 family=10 entries=1 op=nft_register_rule pid=2166 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:07.494000 audit[2166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=556 a0=3 a1=ffffd153ed40 a2=0 a3=1 items=0 ppid=2102 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.494000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 21:42:07.496425 kubelet[2102]: I1002 21:42:07.496403 2102 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 21:42:07.496425 kubelet[2102]: I1002 21:42:07.496426 2102 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 21:42:07.496527 kubelet[2102]: I1002 21:42:07.496447 2102 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 21:42:07.496527 kubelet[2102]: E1002 21:42:07.496485 2102 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 21:42:07.497115 kubelet[2102]: W1002 21:42:07.496893 2102 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:07.497115 kubelet[2102]: E1002 21:42:07.496921 2102 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:07.497000 audit[2167]: NETFILTER_CFG table=mangle:59 family=10 entries=1 op=nft_register_chain pid=2167 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:07.497000 audit[2167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd5fd1170 a2=0 a3=1 items=0 ppid=2102 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.497000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 21:42:07.499000 audit[2168]: NETFILTER_CFG table=nat:60 family=10 entries=1 op=nft_register_chain pid=2168 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:07.499000 audit[2168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcba8fd80 a2=0 a3=1 items=0 ppid=2102 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.499000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 21:42:07.500000 audit[2169]: NETFILTER_CFG table=filter:61 family=10 entries=1 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:07.500000 audit[2169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe04d58f0 a2=0 a3=1 items=0 ppid=2102 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:07.500000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 21:42:07.510566 kubelet[2102]: E1002 21:42:07.510533 2102 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.200.20.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-21920721f7?timeout=10s": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:07.596687 kubelet[2102]: I1002 21:42:07.596607 2102 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:42:07.599840 kubelet[2102]: I1002 21:42:07.599819 2102 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:42:07.601409 kubelet[2102]: I1002 21:42:07.601392 2102 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:42:07.602087 kubelet[2102]: I1002 21:42:07.601895 2102 status_manager.go:698] "Failed to get status for pod" podUID=5dcf49d59ac299e6852478720b761cb7 pod="kube-system/kube-apiserver-ci-3510.3.0-a-21920721f7" err="Get \"https://10.200.20.15:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510.3.0-a-21920721f7\": dial tcp 10.200.20.15:6443: connect: connection refused" Oct 2 21:42:07.605619 systemd[1]: Created slice kubepods-burstable-pod5dcf49d59ac299e6852478720b761cb7.slice. Oct 2 21:42:07.606829 kubelet[2102]: I1002 21:42:07.606591 2102 status_manager.go:698] "Failed to get status for pod" podUID=da83b91aa25c743f20cc7909b821846a pod="kube-system/kube-controller-manager-ci-3510.3.0-a-21920721f7" err="Get \"https://10.200.20.15:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510.3.0-a-21920721f7\": dial tcp 10.200.20.15:6443: connect: connection refused" Oct 2 21:42:07.607587 kubelet[2102]: I1002 21:42:07.607447 2102 status_manager.go:698] "Failed to get status for pod" podUID=3b05d57550673ea7269a78e2cc60ec54 pod="kube-system/kube-scheduler-ci-3510.3.0-a-21920721f7" err="Get \"https://10.200.20.15:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510.3.0-a-21920721f7\": dial tcp 10.200.20.15:6443: connect: connection refused" Oct 2 21:42:07.609887 kubelet[2102]: I1002 21:42:07.609869 2102 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/da83b91aa25c743f20cc7909b821846a-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-21920721f7\" (UID: \"da83b91aa25c743f20cc7909b821846a\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-21920721f7" Oct 2 21:42:07.610033 kubelet[2102]: I1002 21:42:07.610023 2102 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/da83b91aa25c743f20cc7909b821846a-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-21920721f7\" (UID: \"da83b91aa25c743f20cc7909b821846a\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-21920721f7" Oct 2 21:42:07.610148 kubelet[2102]: I1002 21:42:07.610139 2102 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/da83b91aa25c743f20cc7909b821846a-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-21920721f7\" (UID: \"da83b91aa25c743f20cc7909b821846a\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-21920721f7" Oct 2 21:42:07.610275 kubelet[2102]: I1002 21:42:07.610266 2102 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/da83b91aa25c743f20cc7909b821846a-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-21920721f7\" (UID: \"da83b91aa25c743f20cc7909b821846a\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-21920721f7" Oct 2 21:42:07.610379 kubelet[2102]: I1002 21:42:07.610370 2102 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3b05d57550673ea7269a78e2cc60ec54-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-21920721f7\" (UID: \"3b05d57550673ea7269a78e2cc60ec54\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-21920721f7" Oct 2 21:42:07.610477 kubelet[2102]: I1002 21:42:07.610468 2102 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5dcf49d59ac299e6852478720b761cb7-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-21920721f7\" (UID: \"5dcf49d59ac299e6852478720b761cb7\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-21920721f7" Oct 2 21:42:07.610577 kubelet[2102]: I1002 21:42:07.610569 2102 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5dcf49d59ac299e6852478720b761cb7-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-21920721f7\" (UID: \"5dcf49d59ac299e6852478720b761cb7\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-21920721f7" Oct 2 21:42:07.610673 kubelet[2102]: I1002 21:42:07.610664 2102 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5dcf49d59ac299e6852478720b761cb7-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-21920721f7\" (UID: \"5dcf49d59ac299e6852478720b761cb7\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-21920721f7" Oct 2 21:42:07.610764 kubelet[2102]: I1002 21:42:07.610756 2102 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/da83b91aa25c743f20cc7909b821846a-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-21920721f7\" (UID: \"da83b91aa25c743f20cc7909b821846a\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-21920721f7" Oct 2 21:42:07.615230 kubelet[2102]: I1002 21:42:07.615204 2102 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-21920721f7" Oct 2 21:42:07.615498 kubelet[2102]: E1002 21:42:07.615480 2102 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.15:6443/api/v1/nodes\": dial tcp 10.200.20.15:6443: connect: connection refused" node="ci-3510.3.0-a-21920721f7" Oct 2 21:42:07.617395 systemd[1]: Created slice kubepods-burstable-podda83b91aa25c743f20cc7909b821846a.slice. Oct 2 21:42:07.621643 systemd[1]: Created slice kubepods-burstable-pod3b05d57550673ea7269a78e2cc60ec54.slice. Oct 2 21:42:07.910926 kubelet[2102]: E1002 21:42:07.910892 2102 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.200.20.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-21920721f7?timeout=10s": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:07.917007 env[1351]: time="2023-10-02T21:42:07.916720223Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-21920721f7,Uid:5dcf49d59ac299e6852478720b761cb7,Namespace:kube-system,Attempt:0,}" Oct 2 21:42:07.920229 env[1351]: time="2023-10-02T21:42:07.920176109Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-21920721f7,Uid:da83b91aa25c743f20cc7909b821846a,Namespace:kube-system,Attempt:0,}" Oct 2 21:42:07.925032 env[1351]: time="2023-10-02T21:42:07.924904478Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-21920721f7,Uid:3b05d57550673ea7269a78e2cc60ec54,Namespace:kube-system,Attempt:0,}" Oct 2 21:42:08.017368 kubelet[2102]: I1002 21:42:08.017344 2102 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-21920721f7" Oct 2 21:42:08.017774 kubelet[2102]: E1002 21:42:08.017760 2102 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.15:6443/api/v1/nodes\": dial tcp 10.200.20.15:6443: connect: connection refused" node="ci-3510.3.0-a-21920721f7" Oct 2 21:42:08.128587 kubelet[2102]: W1002 21:42:08.128548 2102 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:08.128587 kubelet[2102]: E1002 21:42:08.128589 2102 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:08.275448 kubelet[2102]: W1002 21:42:08.275328 2102 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-21920721f7&limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:08.275448 kubelet[2102]: E1002 21:42:08.275366 2102 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-21920721f7&limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:08.492552 kubelet[2102]: W1002 21:42:08.492506 2102 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:08.492552 kubelet[2102]: E1002 21:42:08.492553 2102 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:08.637857 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2697948857.mount: Deactivated successfully. Oct 2 21:42:08.660888 env[1351]: time="2023-10-02T21:42:08.660844069Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:08.677868 env[1351]: time="2023-10-02T21:42:08.677818299Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:08.682818 env[1351]: time="2023-10-02T21:42:08.682783988Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:08.686996 env[1351]: time="2023-10-02T21:42:08.686956755Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:08.694988 kubelet[2102]: W1002 21:42:08.694954 2102 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:08.695081 kubelet[2102]: E1002 21:42:08.694995 2102 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:08.696070 env[1351]: time="2023-10-02T21:42:08.696031212Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:08.700098 env[1351]: time="2023-10-02T21:42:08.700068939Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:08.703142 env[1351]: time="2023-10-02T21:42:08.703105584Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:08.712050 env[1351]: time="2023-10-02T21:42:08.712010240Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:08.712692 kubelet[2102]: E1002 21:42:08.712635 2102 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.200.20.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-21920721f7?timeout=10s": dial tcp 10.200.20.15:6443: connect: connection refused Oct 2 21:42:08.718259 env[1351]: time="2023-10-02T21:42:08.718231571Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:08.721662 env[1351]: time="2023-10-02T21:42:08.721622897Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:08.726722 env[1351]: time="2023-10-02T21:42:08.726692906Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:08.738410 env[1351]: time="2023-10-02T21:42:08.738368286Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:08.813867 env[1351]: time="2023-10-02T21:42:08.813673140Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:42:08.813867 env[1351]: time="2023-10-02T21:42:08.813711060Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:42:08.813867 env[1351]: time="2023-10-02T21:42:08.813721820Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:42:08.814091 env[1351]: time="2023-10-02T21:42:08.814042860Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a3cdd33dee26f3f9377302a1122b13c394434251a9df4215dcc70bc7557e3fee pid=2180 runtime=io.containerd.runc.v2 Oct 2 21:42:08.820825 kubelet[2102]: I1002 21:42:08.820780 2102 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-21920721f7" Oct 2 21:42:08.821133 kubelet[2102]: E1002 21:42:08.821107 2102 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.15:6443/api/v1/nodes\": dial tcp 10.200.20.15:6443: connect: connection refused" node="ci-3510.3.0-a-21920721f7" Oct 2 21:42:08.823237 env[1351]: time="2023-10-02T21:42:08.823042316Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:42:08.823237 env[1351]: time="2023-10-02T21:42:08.823078036Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:42:08.823237 env[1351]: time="2023-10-02T21:42:08.823089556Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:42:08.823571 env[1351]: time="2023-10-02T21:42:08.823418917Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7785ee676f6e3ea2d876cf729c0aaaec4d997bf2cb8702b560fb0b1e93fbf1b9 pid=2195 runtime=io.containerd.runc.v2 Oct 2 21:42:08.840276 systemd[1]: Started cri-containerd-a3cdd33dee26f3f9377302a1122b13c394434251a9df4215dcc70bc7557e3fee.scope. Oct 2 21:42:08.847655 env[1351]: time="2023-10-02T21:42:08.842807831Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:42:08.847655 env[1351]: time="2023-10-02T21:42:08.842864151Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:42:08.847655 env[1351]: time="2023-10-02T21:42:08.842874431Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:42:08.847655 env[1351]: time="2023-10-02T21:42:08.843027352Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/47f6905cbd06b3bdc6baefd3b16d745fdca20f9df414e13e322fb6fe7efbd957 pid=2222 runtime=io.containerd.runc.v2 Oct 2 21:42:08.856589 systemd[1]: Started cri-containerd-7785ee676f6e3ea2d876cf729c0aaaec4d997bf2cb8702b560fb0b1e93fbf1b9.scope. Oct 2 21:42:08.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit: BPF prog-id=62 op=LOAD Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2180 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:08.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133636464333364656532366633663933373733303261313132326231 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2180 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:08.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133636464333364656532366633663933373733303261313132326231 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit: BPF prog-id=63 op=LOAD Oct 2 21:42:08.870000 audit[2202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2180 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:08.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133636464333364656532366633663933373733303261313132326231 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit: BPF prog-id=64 op=LOAD Oct 2 21:42:08.870000 audit[2202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2180 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:08.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133636464333364656532366633663933373733303261313132326231 Oct 2 21:42:08.870000 audit: BPF prog-id=64 op=UNLOAD Oct 2 21:42:08.870000 audit: BPF prog-id=63 op=UNLOAD Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.870000 audit: BPF prog-id=65 op=LOAD Oct 2 21:42:08.870000 audit[2202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2180 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:08.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133636464333364656532366633663933373733303261313132326231 Oct 2 21:42:08.877715 systemd[1]: Started cri-containerd-47f6905cbd06b3bdc6baefd3b16d745fdca20f9df414e13e322fb6fe7efbd957.scope. Oct 2 21:42:08.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.885000 audit: BPF prog-id=66 op=LOAD Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2195 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:08.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737383565653637366636653365613264383736636637323963306161 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2195 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:08.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737383565653637366636653365613264383736636637323963306161 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit: BPF prog-id=67 op=LOAD Oct 2 21:42:08.886000 audit[2209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2195 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:08.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737383565653637366636653365613264383736636637323963306161 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit: BPF prog-id=68 op=LOAD Oct 2 21:42:08.886000 audit[2209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2195 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:08.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737383565653637366636653365613264383736636637323963306161 Oct 2 21:42:08.886000 audit: BPF prog-id=68 op=UNLOAD Oct 2 21:42:08.886000 audit: BPF prog-id=67 op=UNLOAD Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.886000 audit: BPF prog-id=69 op=LOAD Oct 2 21:42:08.886000 audit[2209]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2195 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:08.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737383565653637366636653365613264383736636637323963306161 Oct 2 21:42:08.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.915000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.915000 audit: BPF prog-id=70 op=LOAD Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { bpf } for pid=2242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2222 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:08.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437663639303563626430366233626463366261656664336231366437 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2222 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:08.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437663639303563626430366233626463366261656664336231366437 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { bpf } for pid=2242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { bpf } for pid=2242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { bpf } for pid=2242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { bpf } for pid=2242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { bpf } for pid=2242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit: BPF prog-id=71 op=LOAD Oct 2 21:42:08.916000 audit[2242]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2222 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:08.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437663639303563626430366233626463366261656664336231366437 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { bpf } for pid=2242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { bpf } for pid=2242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { bpf } for pid=2242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit[2242]: AVC avc: denied { bpf } for pid=2242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.916000 audit: BPF prog-id=72 op=LOAD Oct 2 21:42:08.916000 audit[2242]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2222 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:08.916000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437663639303563626430366233626463366261656664336231366437 Oct 2 21:42:08.917000 audit: BPF prog-id=72 op=UNLOAD Oct 2 21:42:08.917000 audit: BPF prog-id=71 op=UNLOAD Oct 2 21:42:08.917000 audit[2242]: AVC avc: denied { bpf } for pid=2242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.917000 audit[2242]: AVC avc: denied { bpf } for pid=2242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.917000 audit[2242]: AVC avc: denied { bpf } for pid=2242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.917000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.917000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.917000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.917000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.917000 audit[2242]: AVC avc: denied { perfmon } for pid=2242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.917000 audit[2242]: AVC avc: denied { bpf } for pid=2242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.917000 audit[2242]: AVC avc: denied { bpf } for pid=2242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:08.917000 audit: BPF prog-id=73 op=LOAD Oct 2 21:42:08.917000 audit[2242]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2222 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:08.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437663639303563626430366233626463366261656664336231366437 Oct 2 21:42:08.919061 env[1351]: time="2023-10-02T21:42:08.918689445Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-21920721f7,Uid:5dcf49d59ac299e6852478720b761cb7,Namespace:kube-system,Attempt:0,} returns sandbox id \"a3cdd33dee26f3f9377302a1122b13c394434251a9df4215dcc70bc7557e3fee\"" Oct 2 21:42:08.928612 env[1351]: time="2023-10-02T21:42:08.928558743Z" level=info msg="CreateContainer within sandbox \"a3cdd33dee26f3f9377302a1122b13c394434251a9df4215dcc70bc7557e3fee\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 21:42:08.936381 env[1351]: time="2023-10-02T21:42:08.936337037Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-21920721f7,Uid:3b05d57550673ea7269a78e2cc60ec54,Namespace:kube-system,Attempt:0,} returns sandbox id \"7785ee676f6e3ea2d876cf729c0aaaec4d997bf2cb8702b560fb0b1e93fbf1b9\"" Oct 2 21:42:08.939141 env[1351]: time="2023-10-02T21:42:08.939087241Z" level=info msg="CreateContainer within sandbox \"7785ee676f6e3ea2d876cf729c0aaaec4d997bf2cb8702b560fb0b1e93fbf1b9\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 21:42:08.946851 env[1351]: time="2023-10-02T21:42:08.946793335Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-21920721f7,Uid:da83b91aa25c743f20cc7909b821846a,Namespace:kube-system,Attempt:0,} returns sandbox id \"47f6905cbd06b3bdc6baefd3b16d745fdca20f9df414e13e322fb6fe7efbd957\"" Oct 2 21:42:08.949514 env[1351]: time="2023-10-02T21:42:08.949462780Z" level=info msg="CreateContainer within sandbox \"47f6905cbd06b3bdc6baefd3b16d745fdca20f9df414e13e322fb6fe7efbd957\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 21:42:08.979413 env[1351]: time="2023-10-02T21:42:08.979365313Z" level=info msg="CreateContainer within sandbox \"a3cdd33dee26f3f9377302a1122b13c394434251a9df4215dcc70bc7557e3fee\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"a09b63510ad4bf00a4f0341dfde50b967da981133a5f76239c022de13a831d40\"" Oct 2 21:42:08.980209 env[1351]: time="2023-10-02T21:42:08.980152674Z" level=info msg="StartContainer for \"a09b63510ad4bf00a4f0341dfde50b967da981133a5f76239c022de13a831d40\"" Oct 2 21:42:09.001823 systemd[1]: Started cri-containerd-a09b63510ad4bf00a4f0341dfde50b967da981133a5f76239c022de13a831d40.scope. Oct 2 21:42:09.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit: BPF prog-id=74 op=LOAD Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2180 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:09.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130396236333531306164346266303061346630333431646664653530 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2180 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:09.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130396236333531306164346266303061346630333431646664653530 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit: BPF prog-id=75 op=LOAD Oct 2 21:42:09.021000 audit[2308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2180 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:09.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130396236333531306164346266303061346630333431646664653530 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit: BPF prog-id=76 op=LOAD Oct 2 21:42:09.021000 audit[2308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2180 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:09.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130396236333531306164346266303061346630333431646664653530 Oct 2 21:42:09.021000 audit: BPF prog-id=76 op=UNLOAD Oct 2 21:42:09.021000 audit: BPF prog-id=75 op=UNLOAD Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { perfmon } for pid=2308 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit[2308]: AVC avc: denied { bpf } for pid=2308 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.021000 audit: BPF prog-id=77 op=LOAD Oct 2 21:42:09.021000 audit[2308]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2180 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:09.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130396236333531306164346266303061346630333431646664653530 Oct 2 21:42:09.039898 env[1351]: time="2023-10-02T21:42:09.039836295Z" level=info msg="CreateContainer within sandbox \"7785ee676f6e3ea2d876cf729c0aaaec4d997bf2cb8702b560fb0b1e93fbf1b9\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"06cabfb400385a1f90917f9f572033155b876faeba51237e8b7601088c155f11\"" Oct 2 21:42:09.040456 env[1351]: time="2023-10-02T21:42:09.040423896Z" level=info msg="StartContainer for \"06cabfb400385a1f90917f9f572033155b876faeba51237e8b7601088c155f11\"" Oct 2 21:42:09.040845 env[1351]: time="2023-10-02T21:42:09.040815937Z" level=info msg="CreateContainer within sandbox \"47f6905cbd06b3bdc6baefd3b16d745fdca20f9df414e13e322fb6fe7efbd957\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"d126e639a5fdf6d3478a5a2a3e9fc6d53b27cbbc22de2c62cd7ad238c1c4507f\"" Oct 2 21:42:09.041326 env[1351]: time="2023-10-02T21:42:09.041301858Z" level=info msg="StartContainer for \"d126e639a5fdf6d3478a5a2a3e9fc6d53b27cbbc22de2c62cd7ad238c1c4507f\"" Oct 2 21:42:09.067604 env[1351]: time="2023-10-02T21:42:09.067557181Z" level=info msg="StartContainer for \"a09b63510ad4bf00a4f0341dfde50b967da981133a5f76239c022de13a831d40\" returns successfully" Oct 2 21:42:09.073172 systemd[1]: Started cri-containerd-06cabfb400385a1f90917f9f572033155b876faeba51237e8b7601088c155f11.scope. Oct 2 21:42:09.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.097000 audit: BPF prog-id=78 op=LOAD Oct 2 21:42:09.098000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.098000 audit[2346]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2195 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:09.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036636162666234303033383561316639303931376639663537323033 Oct 2 21:42:09.098000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.098000 audit[2346]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2195 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:09.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036636162666234303033383561316639303931376639663537323033 Oct 2 21:42:09.098000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.098000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.098000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.098000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.098000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.098000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.098000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.098000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.098000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.098000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.098000 audit: BPF prog-id=79 op=LOAD Oct 2 21:42:09.098000 audit[2346]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2195 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:09.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036636162666234303033383561316639303931376639663537323033 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit: BPF prog-id=80 op=LOAD Oct 2 21:42:09.099000 audit[2346]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2195 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:09.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036636162666234303033383561316639303931376639663537323033 Oct 2 21:42:09.099000 audit: BPF prog-id=80 op=UNLOAD Oct 2 21:42:09.099000 audit: BPF prog-id=79 op=UNLOAD Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { perfmon } for pid=2346 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit[2346]: AVC avc: denied { bpf } for pid=2346 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.099000 audit: BPF prog-id=81 op=LOAD Oct 2 21:42:09.099000 audit[2346]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2195 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:09.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036636162666234303033383561316639303931376639663537323033 Oct 2 21:42:09.107627 systemd[1]: Started cri-containerd-d126e639a5fdf6d3478a5a2a3e9fc6d53b27cbbc22de2c62cd7ad238c1c4507f.scope. Oct 2 21:42:09.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit: BPF prog-id=82 op=LOAD Oct 2 21:42:09.138000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[2349]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2222 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:09.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431323665363339613566646636643334373861356132613365396663 Oct 2 21:42:09.138000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[2349]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2222 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:09.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431323665363339613566646636643334373861356132613365396663 Oct 2 21:42:09.138000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.138000 audit: BPF prog-id=83 op=LOAD Oct 2 21:42:09.138000 audit[2349]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2222 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:09.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431323665363339613566646636643334373861356132613365396663 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit: BPF prog-id=84 op=LOAD Oct 2 21:42:09.139000 audit[2349]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2222 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:09.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431323665363339613566646636643334373861356132613365396663 Oct 2 21:42:09.139000 audit: BPF prog-id=84 op=UNLOAD Oct 2 21:42:09.139000 audit: BPF prog-id=83 op=UNLOAD Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { perfmon } for pid=2349 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit[2349]: AVC avc: denied { bpf } for pid=2349 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:09.139000 audit: BPF prog-id=85 op=LOAD Oct 2 21:42:09.139000 audit[2349]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2222 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:09.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431323665363339613566646636643334373861356132613365396663 Oct 2 21:42:09.150291 env[1351]: time="2023-10-02T21:42:09.150163438Z" level=info msg="StartContainer for \"06cabfb400385a1f90917f9f572033155b876faeba51237e8b7601088c155f11\" returns successfully" Oct 2 21:42:09.189544 env[1351]: time="2023-10-02T21:42:09.189495663Z" level=info msg="StartContainer for \"d126e639a5fdf6d3478a5a2a3e9fc6d53b27cbbc22de2c62cd7ad238c1c4507f\" returns successfully" Oct 2 21:42:10.381000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:10.381000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40000505d0 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:42:10.381000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:42:10.381000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:10.381000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000910040 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:42:10.381000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:42:10.423172 kubelet[2102]: I1002 21:42:10.423145 2102 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-21920721f7" Oct 2 21:42:11.589000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:11.595414 kernel: kauditd_printk_skb: 626 callbacks suppressed Oct 2 21:42:11.595535 kernel: audit: type=1400 audit(1696282931.589:707): avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:11.590000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:11.667793 kernel: audit: type=1400 audit(1696282931.590:708): avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:11.590000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4003c25e60 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:42:11.699046 kernel: audit: type=1300 audit(1696282931.590:708): arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4003c25e60 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:42:11.699168 kernel: audit: type=1327 audit(1696282931.590:708): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:42:11.590000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:42:11.598000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:11.746135 kernel: audit: type=1400 audit(1696282931.598:709): avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:11.598000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4000dc0660 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:42:11.773582 kernel: audit: type=1300 audit(1696282931.598:709): arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4000dc0660 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:42:11.598000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:42:11.797236 kernel: audit: type=1327 audit(1696282931.598:709): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:42:11.606000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:11.819000 kernel: audit: type=1400 audit(1696282931.606:710): avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:11.606000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=4002a7e040 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:42:11.848460 kernel: audit: type=1300 audit(1696282931.606:710): arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=4002a7e040 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:42:11.606000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:42:11.873378 kernel: audit: type=1327 audit(1696282931.606:710): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:42:11.620000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:11.620000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=40018b45e0 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:42:11.620000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:42:11.620000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:11.620000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=4000dc0ed0 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:42:11.620000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:42:11.589000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4003e14000 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:42:11.589000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:42:11.919820 kubelet[2102]: E1002 21:42:11.919786 2102 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-21920721f7\" not found" node="ci-3510.3.0-a-21920721f7" Oct 2 21:42:12.074721 kubelet[2102]: I1002 21:42:12.074685 2102 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-21920721f7" Oct 2 21:42:12.164704 kubelet[2102]: E1002 21:42:12.164537 2102 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-21920721f7.178a6855c82ff8b0", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-21920721f7", UID:"ci-3510.3.0-a-21920721f7", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-21920721f7"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 298508976, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 298508976, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:42:12.261099 kubelet[2102]: E1002 21:42:12.260995 2102 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-21920721f7.178a6855c873cdb9", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-21920721f7", UID:"ci-3510.3.0-a-21920721f7", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-21920721f7"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 302954425, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 302954425, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:42:12.298780 kubelet[2102]: I1002 21:42:12.298737 2102 apiserver.go:52] "Watching apiserver" Oct 2 21:42:12.309189 kubelet[2102]: I1002 21:42:12.309145 2102 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 21:42:12.352449 kubelet[2102]: I1002 21:42:12.352410 2102 reconciler.go:41] "Reconciler: start to sync state" Oct 2 21:42:12.357445 kubelet[2102]: E1002 21:42:12.357336 2102 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-21920721f7.178a6855cefce6b8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-21920721f7", UID:"ci-3510.3.0-a-21920721f7", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ci-3510.3.0-a-21920721f7 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-21920721f7"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 412602552, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 412602552, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:42:12.416334 kubelet[2102]: E1002 21:42:12.416151 2102 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-21920721f7.178a6855cefcfdb0", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-21920721f7", UID:"ci-3510.3.0-a-21920721f7", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ci-3510.3.0-a-21920721f7 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-21920721f7"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 412608432, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 412608432, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:42:12.469924 kubelet[2102]: E1002 21:42:12.469823 2102 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-21920721f7.178a6855cefd0800", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-21920721f7", UID:"ci-3510.3.0-a-21920721f7", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ci-3510.3.0-a-21920721f7 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-21920721f7"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 412611072, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 412611072, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:42:12.526847 kubelet[2102]: E1002 21:42:12.526750 2102 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-21920721f7.178a6855cefce6b8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-21920721f7", UID:"ci-3510.3.0-a-21920721f7", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ci-3510.3.0-a-21920721f7 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-21920721f7"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 412602552, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 412692832, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:42:12.582756 kubelet[2102]: E1002 21:42:12.582662 2102 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-21920721f7.178a6855cefcfdb0", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-21920721f7", UID:"ci-3510.3.0-a-21920721f7", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ci-3510.3.0-a-21920721f7 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-21920721f7"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 412608432, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 412694912, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:42:12.637740 kubelet[2102]: E1002 21:42:12.637630 2102 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-21920721f7.178a6855cefd0800", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-21920721f7", UID:"ci-3510.3.0-a-21920721f7", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ci-3510.3.0-a-21920721f7 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-21920721f7"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 412611072, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 412696792, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:42:12.691471 kubelet[2102]: E1002 21:42:12.691293 2102 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-21920721f7.178a6855d0a58f94", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-21920721f7", UID:"ci-3510.3.0-a-21920721f7", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-21920721f7"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 440433044, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 440433044, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:42:12.818387 kubelet[2102]: E1002 21:42:12.818286 2102 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-21920721f7.178a6855cefce6b8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-21920721f7", UID:"ci-3510.3.0-a-21920721f7", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ci-3510.3.0-a-21920721f7 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-21920721f7"}, FirstTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 412602552, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 21, 42, 7, 599750185, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 21:42:14.018000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:14.018000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000911bc0 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:42:14.018000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:42:14.019000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:14.019000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000911d00 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:42:14.019000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:42:14.020000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:14.020000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000911e40 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:42:14.020000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:42:14.021000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:42:14.021000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000911f80 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:42:14.021000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:42:14.427273 systemd[1]: Reloading. Oct 2 21:42:14.540048 /usr/lib/systemd/system-generators/torcx-generator[2431]: time="2023-10-02T21:42:14Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 21:42:14.540085 /usr/lib/systemd/system-generators/torcx-generator[2431]: time="2023-10-02T21:42:14Z" level=info msg="torcx already run" Oct 2 21:42:14.635944 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 21:42:14.636132 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 21:42:14.651472 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 21:42:14.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.733000 audit: BPF prog-id=86 op=LOAD Oct 2 21:42:14.733000 audit: BPF prog-id=47 op=UNLOAD Oct 2 21:42:14.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.733000 audit: BPF prog-id=87 op=LOAD Oct 2 21:42:14.733000 audit: BPF prog-id=48 op=UNLOAD Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit: BPF prog-id=88 op=LOAD Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.734000 audit: BPF prog-id=89 op=LOAD Oct 2 21:42:14.734000 audit: BPF prog-id=49 op=UNLOAD Oct 2 21:42:14.734000 audit: BPF prog-id=50 op=UNLOAD Oct 2 21:42:14.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.735000 audit: BPF prog-id=90 op=LOAD Oct 2 21:42:14.735000 audit: BPF prog-id=74 op=UNLOAD Oct 2 21:42:14.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.736000 audit: BPF prog-id=91 op=LOAD Oct 2 21:42:14.736000 audit: BPF prog-id=62 op=UNLOAD Oct 2 21:42:14.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.737000 audit: BPF prog-id=92 op=LOAD Oct 2 21:42:14.737000 audit: BPF prog-id=51 op=UNLOAD Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit: BPF prog-id=93 op=LOAD Oct 2 21:42:14.738000 audit: BPF prog-id=52 op=UNLOAD Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit: BPF prog-id=94 op=LOAD Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit: BPF prog-id=95 op=LOAD Oct 2 21:42:14.738000 audit: BPF prog-id=53 op=UNLOAD Oct 2 21:42:14.738000 audit: BPF prog-id=54 op=UNLOAD Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.738000 audit: BPF prog-id=96 op=LOAD Oct 2 21:42:14.738000 audit: BPF prog-id=82 op=UNLOAD Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit: BPF prog-id=97 op=LOAD Oct 2 21:42:14.739000 audit: BPF prog-id=55 op=UNLOAD Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit: BPF prog-id=98 op=LOAD Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.739000 audit: BPF prog-id=99 op=LOAD Oct 2 21:42:14.740000 audit: BPF prog-id=56 op=UNLOAD Oct 2 21:42:14.740000 audit: BPF prog-id=57 op=UNLOAD Oct 2 21:42:14.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.740000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.741000 audit: BPF prog-id=100 op=LOAD Oct 2 21:42:14.741000 audit: BPF prog-id=70 op=UNLOAD Oct 2 21:42:14.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.742000 audit: BPF prog-id=101 op=LOAD Oct 2 21:42:14.742000 audit: BPF prog-id=78 op=UNLOAD Oct 2 21:42:14.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.743000 audit: BPF prog-id=102 op=LOAD Oct 2 21:42:14.743000 audit: BPF prog-id=58 op=UNLOAD Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit: BPF prog-id=103 op=LOAD Oct 2 21:42:14.744000 audit: BPF prog-id=59 op=UNLOAD Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit: BPF prog-id=104 op=LOAD Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.744000 audit: BPF prog-id=105 op=LOAD Oct 2 21:42:14.744000 audit: BPF prog-id=60 op=UNLOAD Oct 2 21:42:14.744000 audit: BPF prog-id=61 op=UNLOAD Oct 2 21:42:14.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.745000 audit: BPF prog-id=106 op=LOAD Oct 2 21:42:14.745000 audit: BPF prog-id=66 op=UNLOAD Oct 2 21:42:14.771097 systemd[1]: Stopping kubelet.service... Oct 2 21:42:14.793546 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 21:42:14.793747 systemd[1]: Stopped kubelet.service. Oct 2 21:42:14.792000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:42:14.795986 systemd[1]: Started kubelet.service. Oct 2 21:42:14.796000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:42:14.893355 kubelet[2491]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 21:42:14.893355 kubelet[2491]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:42:14.893678 kubelet[2491]: I1002 21:42:14.893439 2491 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 21:42:14.894709 kubelet[2491]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 21:42:14.894709 kubelet[2491]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 21:42:14.904333 kubelet[2491]: I1002 21:42:14.904303 2491 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 21:42:14.904333 kubelet[2491]: I1002 21:42:14.904329 2491 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 21:42:14.904667 kubelet[2491]: I1002 21:42:14.904648 2491 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 21:42:14.904000 audit[2503]: USER_ACCT pid=2503 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:42:14.906990 kubelet[2491]: I1002 21:42:14.906881 2491 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 21:42:14.907351 sudo[2503]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 21:42:14.906000 audit[2503]: CRED_REFR pid=2503 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:42:14.907582 sudo[2503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 21:42:14.908000 audit[2503]: USER_START pid=2503 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:42:14.912123 kubelet[2491]: I1002 21:42:14.912098 2491 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 21:42:14.912829 kubelet[2491]: W1002 21:42:14.912808 2491 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 21:42:14.913555 kubelet[2491]: I1002 21:42:14.913538 2491 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 21:42:14.913943 kubelet[2491]: I1002 21:42:14.913930 2491 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 21:42:14.914079 kubelet[2491]: I1002 21:42:14.914060 2491 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 21:42:14.914250 kubelet[2491]: I1002 21:42:14.914237 2491 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 21:42:14.914329 kubelet[2491]: I1002 21:42:14.914320 2491 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 21:42:14.914436 kubelet[2491]: I1002 21:42:14.914426 2491 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:42:14.927034 kubelet[2491]: I1002 21:42:14.927012 2491 kubelet.go:398] "Attempting to sync node with API server" Oct 2 21:42:14.928384 kubelet[2491]: I1002 21:42:14.928366 2491 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 21:42:14.928755 kubelet[2491]: I1002 21:42:14.928741 2491 kubelet.go:297] "Adding apiserver pod source" Oct 2 21:42:14.928834 kubelet[2491]: I1002 21:42:14.928825 2491 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 21:42:14.933309 kubelet[2491]: I1002 21:42:14.933294 2491 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 21:42:14.934041 kubelet[2491]: I1002 21:42:14.934024 2491 server.go:1186] "Started kubelet" Oct 2 21:42:14.937000 audit[2491]: AVC avc: denied { mac_admin } for pid=2491 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.937000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:42:14.937000 audit[2491]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bff590 a1=4000421650 a2=4000bff560 a3=25 items=0 ppid=1 pid=2491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:14.937000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:42:14.939233 kubelet[2491]: I1002 21:42:14.939213 2491 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 21:42:14.938000 audit[2491]: AVC avc: denied { mac_admin } for pid=2491 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:14.938000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:42:14.938000 audit[2491]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ba6b60 a1=4000421668 a2=4000bff620 a3=25 items=0 ppid=1 pid=2491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:14.938000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:42:14.940076 kubelet[2491]: I1002 21:42:14.940061 2491 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 21:42:14.940345 kubelet[2491]: I1002 21:42:14.940334 2491 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 21:42:14.948412 kubelet[2491]: E1002 21:42:14.948387 2491 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 21:42:14.948635 kubelet[2491]: E1002 21:42:14.948624 2491 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 21:42:14.951598 kubelet[2491]: I1002 21:42:14.951578 2491 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 21:42:14.952365 kubelet[2491]: I1002 21:42:14.952350 2491 server.go:451] "Adding debug handlers to kubelet server" Oct 2 21:42:14.959897 kubelet[2491]: I1002 21:42:14.959810 2491 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 21:42:14.960792 kubelet[2491]: I1002 21:42:14.960776 2491 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 21:42:15.063847 kubelet[2491]: I1002 21:42:15.063770 2491 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-21920721f7" Oct 2 21:42:15.074937 kubelet[2491]: I1002 21:42:15.074909 2491 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-21920721f7" Oct 2 21:42:15.075201 kubelet[2491]: I1002 21:42:15.075190 2491 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-21920721f7" Oct 2 21:42:15.111838 kubelet[2491]: I1002 21:42:15.111816 2491 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 21:42:15.112019 kubelet[2491]: I1002 21:42:15.112010 2491 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 21:42:15.112100 kubelet[2491]: I1002 21:42:15.112092 2491 state_mem.go:36] "Initialized new in-memory state store" Oct 2 21:42:15.112388 kubelet[2491]: I1002 21:42:15.112377 2491 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 21:42:15.112486 kubelet[2491]: I1002 21:42:15.112477 2491 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 21:42:15.112557 kubelet[2491]: I1002 21:42:15.112549 2491 policy_none.go:49] "None policy: Start" Oct 2 21:42:15.113225 kubelet[2491]: I1002 21:42:15.113210 2491 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 21:42:15.113325 kubelet[2491]: I1002 21:42:15.113316 2491 state_mem.go:35] "Initializing new in-memory state store" Oct 2 21:42:15.113493 kubelet[2491]: I1002 21:42:15.113483 2491 state_mem.go:75] "Updated machine memory state" Oct 2 21:42:15.116982 kubelet[2491]: I1002 21:42:15.116968 2491 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 21:42:15.115000 audit[2491]: AVC avc: denied { mac_admin } for pid=2491 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:15.115000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 21:42:15.115000 audit[2491]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400130e8a0 a1=40013506a8 a2=400130e870 a3=25 items=0 ppid=1 pid=2491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:15.115000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 21:42:15.117360 kubelet[2491]: I1002 21:42:15.117343 2491 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 21:42:15.118535 kubelet[2491]: I1002 21:42:15.118519 2491 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 21:42:15.127406 kubelet[2491]: I1002 21:42:15.127385 2491 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 21:42:15.156680 kubelet[2491]: I1002 21:42:15.156648 2491 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 21:42:15.156835 kubelet[2491]: I1002 21:42:15.156826 2491 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 21:42:15.156919 kubelet[2491]: I1002 21:42:15.156911 2491 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 21:42:15.157010 kubelet[2491]: E1002 21:42:15.157003 2491 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 21:42:15.257295 kubelet[2491]: I1002 21:42:15.257257 2491 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:42:15.257558 kubelet[2491]: I1002 21:42:15.257546 2491 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:42:15.260615 kubelet[2491]: I1002 21:42:15.260589 2491 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:42:15.265342 kubelet[2491]: I1002 21:42:15.265319 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5dcf49d59ac299e6852478720b761cb7-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-21920721f7\" (UID: \"5dcf49d59ac299e6852478720b761cb7\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-21920721f7" Oct 2 21:42:15.265624 kubelet[2491]: I1002 21:42:15.265611 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/da83b91aa25c743f20cc7909b821846a-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-21920721f7\" (UID: \"da83b91aa25c743f20cc7909b821846a\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-21920721f7" Oct 2 21:42:15.265751 kubelet[2491]: I1002 21:42:15.265742 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/da83b91aa25c743f20cc7909b821846a-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-21920721f7\" (UID: \"da83b91aa25c743f20cc7909b821846a\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-21920721f7" Oct 2 21:42:15.265861 kubelet[2491]: I1002 21:42:15.265852 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3b05d57550673ea7269a78e2cc60ec54-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-21920721f7\" (UID: \"3b05d57550673ea7269a78e2cc60ec54\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-21920721f7" Oct 2 21:42:15.265969 kubelet[2491]: I1002 21:42:15.265960 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5dcf49d59ac299e6852478720b761cb7-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-21920721f7\" (UID: \"5dcf49d59ac299e6852478720b761cb7\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-21920721f7" Oct 2 21:42:15.266076 kubelet[2491]: I1002 21:42:15.266067 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/da83b91aa25c743f20cc7909b821846a-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-21920721f7\" (UID: \"da83b91aa25c743f20cc7909b821846a\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-21920721f7" Oct 2 21:42:15.266173 kubelet[2491]: I1002 21:42:15.266164 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/da83b91aa25c743f20cc7909b821846a-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-21920721f7\" (UID: \"da83b91aa25c743f20cc7909b821846a\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-21920721f7" Oct 2 21:42:15.266302 kubelet[2491]: I1002 21:42:15.266293 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5dcf49d59ac299e6852478720b761cb7-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-21920721f7\" (UID: \"5dcf49d59ac299e6852478720b761cb7\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-21920721f7" Oct 2 21:42:15.266400 kubelet[2491]: I1002 21:42:15.266391 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/da83b91aa25c743f20cc7909b821846a-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-21920721f7\" (UID: \"da83b91aa25c743f20cc7909b821846a\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-21920721f7" Oct 2 21:42:15.468919 sudo[2503]: pam_unix(sudo:session): session closed for user root Oct 2 21:42:15.467000 audit[2503]: USER_END pid=2503 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:42:15.467000 audit[2503]: CRED_DISP pid=2503 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:42:15.929541 kubelet[2491]: I1002 21:42:15.929507 2491 apiserver.go:52] "Watching apiserver" Oct 2 21:42:15.961786 kubelet[2491]: I1002 21:42:15.961754 2491 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 21:42:15.971151 kubelet[2491]: I1002 21:42:15.971131 2491 reconciler.go:41] "Reconciler: start to sync state" Oct 2 21:42:16.172385 kubelet[2491]: E1002 21:42:16.172353 2491 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510.3.0-a-21920721f7\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-21920721f7" Oct 2 21:42:16.334522 kubelet[2491]: E1002 21:42:16.334425 2491 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-21920721f7\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-21920721f7" Oct 2 21:42:17.133023 kubelet[2491]: I1002 21:42:17.132986 2491 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-21920721f7" podStartSLOduration=2.132946642 pod.CreationTimestamp="2023-10-02 21:42:15 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:42:16.756996328 +0000 UTC m=+1.948490811" watchObservedRunningTime="2023-10-02 21:42:17.132946642 +0000 UTC m=+2.324441125" Oct 2 21:42:17.382000 audit[1698]: USER_END pid=1698 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:42:17.383404 sudo[1698]: pam_unix(sudo:session): session closed for user root Oct 2 21:42:17.388987 kernel: kauditd_printk_skb: 283 callbacks suppressed Oct 2 21:42:17.389081 kernel: audit: type=1106 audit(1696282937.382:971): pid=1698 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:42:17.382000 audit[1698]: CRED_DISP pid=1698 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:42:17.432837 kernel: audit: type=1104 audit(1696282937.382:972): pid=1698 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 21:42:17.467407 sshd[1695]: pam_unix(sshd:session): session closed for user core Oct 2 21:42:17.467000 audit[1695]: USER_END pid=1695 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:42:17.470613 systemd[1]: sshd@6-10.200.20.15:22-10.200.12.6:54120.service: Deactivated successfully. Oct 2 21:42:17.471791 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 21:42:17.471970 systemd[1]: session-9.scope: Consumed 6.716s CPU time. Oct 2 21:42:17.495300 systemd-logind[1339]: Session 9 logged out. Waiting for processes to exit. Oct 2 21:42:17.467000 audit[1695]: CRED_DISP pid=1695 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:42:17.516983 kernel: audit: type=1106 audit(1696282937.467:973): pid=1695 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:42:17.517083 kernel: audit: type=1104 audit(1696282937.467:974): pid=1695 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:42:17.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.15:22-10.200.12.6:54120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:42:17.538436 kernel: audit: type=1131 audit(1696282937.468:975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.15:22-10.200.12.6:54120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:42:17.542627 systemd-logind[1339]: Removed session 9. Oct 2 21:42:17.544960 kubelet[2491]: I1002 21:42:17.544934 2491 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-21920721f7" podStartSLOduration=2.544866223 pod.CreationTimestamp="2023-10-02 21:42:15 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:42:17.133868554 +0000 UTC m=+2.325363077" watchObservedRunningTime="2023-10-02 21:42:17.544866223 +0000 UTC m=+2.736360706" Oct 2 21:42:17.545272 kubelet[2491]: I1002 21:42:17.545259 2491 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-21920721f7" podStartSLOduration=2.54523762 pod.CreationTimestamp="2023-10-02 21:42:15 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:42:17.544347068 +0000 UTC m=+2.735841551" watchObservedRunningTime="2023-10-02 21:42:17.54523762 +0000 UTC m=+2.736732103" Oct 2 21:42:24.106000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521291 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 21:42:24.106000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000aa1d40 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:42:24.164152 kernel: audit: type=1400 audit(1696282944.106:976): avc: denied { watch } for pid=2376 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521291 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 21:42:24.164301 kernel: audit: type=1300 audit(1696282944.106:976): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000aa1d40 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:42:24.106000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:42:24.191196 kernel: audit: type=1327 audit(1696282944.106:976): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:42:27.364321 kubelet[2491]: I1002 21:42:27.364286 2491 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 21:42:27.364715 env[1351]: time="2023-10-02T21:42:27.364611500Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 21:42:27.364906 kubelet[2491]: I1002 21:42:27.364880 2491 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 21:42:28.308238 kubelet[2491]: I1002 21:42:28.308206 2491 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:42:28.313140 systemd[1]: Created slice kubepods-besteffort-pod7e1075dd_f05c_4ae0_9137_ebe7b06a992f.slice. Oct 2 21:42:28.324006 kubelet[2491]: I1002 21:42:28.323959 2491 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:42:28.328752 systemd[1]: Created slice kubepods-burstable-podcbfbcf26_6e75_44ea_aa34_8d9a81082c88.slice. Oct 2 21:42:28.349727 kubelet[2491]: I1002 21:42:28.349695 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7e1075dd-f05c-4ae0-9137-ebe7b06a992f-xtables-lock\") pod \"kube-proxy-6gl4f\" (UID: \"7e1075dd-f05c-4ae0-9137-ebe7b06a992f\") " pod="kube-system/kube-proxy-6gl4f" Oct 2 21:42:28.349727 kubelet[2491]: I1002 21:42:28.349734 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7e1075dd-f05c-4ae0-9137-ebe7b06a992f-lib-modules\") pod \"kube-proxy-6gl4f\" (UID: \"7e1075dd-f05c-4ae0-9137-ebe7b06a992f\") " pod="kube-system/kube-proxy-6gl4f" Oct 2 21:42:28.349911 kubelet[2491]: I1002 21:42:28.349764 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8bd74\" (UniqueName: \"kubernetes.io/projected/7e1075dd-f05c-4ae0-9137-ebe7b06a992f-kube-api-access-8bd74\") pod \"kube-proxy-6gl4f\" (UID: \"7e1075dd-f05c-4ae0-9137-ebe7b06a992f\") " pod="kube-system/kube-proxy-6gl4f" Oct 2 21:42:28.349911 kubelet[2491]: I1002 21:42:28.349791 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/7e1075dd-f05c-4ae0-9137-ebe7b06a992f-kube-proxy\") pod \"kube-proxy-6gl4f\" (UID: \"7e1075dd-f05c-4ae0-9137-ebe7b06a992f\") " pod="kube-system/kube-proxy-6gl4f" Oct 2 21:42:28.367985 kubelet[2491]: I1002 21:42:28.367940 2491 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:42:28.372644 systemd[1]: Created slice kubepods-besteffort-podbe41ff3c_3a55_45fb_a00c_e18b6cb9046a.slice. Oct 2 21:42:28.450454 kubelet[2491]: I1002 21:42:28.450415 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cni-path\") pod \"cilium-k9nq4\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " pod="kube-system/cilium-k9nq4" Oct 2 21:42:28.450617 kubelet[2491]: I1002 21:42:28.450486 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-xtables-lock\") pod \"cilium-k9nq4\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " pod="kube-system/cilium-k9nq4" Oct 2 21:42:28.450617 kubelet[2491]: I1002 21:42:28.450510 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-hostproc\") pod \"cilium-k9nq4\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " pod="kube-system/cilium-k9nq4" Oct 2 21:42:28.450617 kubelet[2491]: I1002 21:42:28.450530 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-etc-cni-netd\") pod \"cilium-k9nq4\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " pod="kube-system/cilium-k9nq4" Oct 2 21:42:28.450617 kubelet[2491]: I1002 21:42:28.450551 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-lib-modules\") pod \"cilium-k9nq4\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " pod="kube-system/cilium-k9nq4" Oct 2 21:42:28.450617 kubelet[2491]: I1002 21:42:28.450572 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-clustermesh-secrets\") pod \"cilium-k9nq4\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " pod="kube-system/cilium-k9nq4" Oct 2 21:42:28.450617 kubelet[2491]: I1002 21:42:28.450593 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cilium-config-path\") pod \"cilium-k9nq4\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " pod="kube-system/cilium-k9nq4" Oct 2 21:42:28.450811 kubelet[2491]: I1002 21:42:28.450615 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7lwwc\" (UniqueName: \"kubernetes.io/projected/be41ff3c-3a55-45fb-a00c-e18b6cb9046a-kube-api-access-7lwwc\") pod \"cilium-operator-f59cbd8c6-lsfns\" (UID: \"be41ff3c-3a55-45fb-a00c-e18b6cb9046a\") " pod="kube-system/cilium-operator-f59cbd8c6-lsfns" Oct 2 21:42:28.450811 kubelet[2491]: I1002 21:42:28.450637 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-host-proc-sys-kernel\") pod \"cilium-k9nq4\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " pod="kube-system/cilium-k9nq4" Oct 2 21:42:28.450811 kubelet[2491]: I1002 21:42:28.450657 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-hubble-tls\") pod \"cilium-k9nq4\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " pod="kube-system/cilium-k9nq4" Oct 2 21:42:28.450811 kubelet[2491]: I1002 21:42:28.450676 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cilium-cgroup\") pod \"cilium-k9nq4\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " pod="kube-system/cilium-k9nq4" Oct 2 21:42:28.450811 kubelet[2491]: I1002 21:42:28.450696 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-host-proc-sys-net\") pod \"cilium-k9nq4\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " pod="kube-system/cilium-k9nq4" Oct 2 21:42:28.450930 kubelet[2491]: I1002 21:42:28.450726 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cilium-run\") pod \"cilium-k9nq4\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " pod="kube-system/cilium-k9nq4" Oct 2 21:42:28.450930 kubelet[2491]: I1002 21:42:28.450747 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-bpf-maps\") pod \"cilium-k9nq4\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " pod="kube-system/cilium-k9nq4" Oct 2 21:42:28.450930 kubelet[2491]: I1002 21:42:28.450791 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/be41ff3c-3a55-45fb-a00c-e18b6cb9046a-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-lsfns\" (UID: \"be41ff3c-3a55-45fb-a00c-e18b6cb9046a\") " pod="kube-system/cilium-operator-f59cbd8c6-lsfns" Oct 2 21:42:28.450930 kubelet[2491]: I1002 21:42:28.450813 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-q9hwv\" (UniqueName: \"kubernetes.io/projected/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-kube-api-access-q9hwv\") pod \"cilium-k9nq4\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " pod="kube-system/cilium-k9nq4" Oct 2 21:42:28.919266 env[1351]: time="2023-10-02T21:42:28.918836815Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-6gl4f,Uid:7e1075dd-f05c-4ae0-9137-ebe7b06a992f,Namespace:kube-system,Attempt:0,}" Oct 2 21:42:28.960894 env[1351]: time="2023-10-02T21:42:28.960804868Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:42:28.961118 env[1351]: time="2023-10-02T21:42:28.961095587Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:42:28.961265 env[1351]: time="2023-10-02T21:42:28.961244106Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:42:28.962457 env[1351]: time="2023-10-02T21:42:28.961578704Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e6bdb08d86ef3b39bad7c66711a0646ceada195e01e4b9a7e4a71eb03d77fae2 pid=2587 runtime=io.containerd.runc.v2 Oct 2 21:42:28.975772 systemd[1]: Started cri-containerd-e6bdb08d86ef3b39bad7c66711a0646ceada195e01e4b9a7e4a71eb03d77fae2.scope. Oct 2 21:42:28.976745 env[1351]: time="2023-10-02T21:42:28.976710008Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-lsfns,Uid:be41ff3c-3a55-45fb-a00c-e18b6cb9046a,Namespace:kube-system,Attempt:0,}" Oct 2 21:42:28.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:28.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.032167 kernel: audit: type=1400 audit(1696282948.995:977): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.032288 kernel: audit: type=1400 audit(1696282948.995:978): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:28.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.050246 kernel: audit: type=1400 audit(1696282948.995:979): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:28.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.070492 kernel: audit: type=1400 audit(1696282948.995:980): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:28.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.090626 kernel: audit: type=1400 audit(1696282948.995:981): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:28.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.109222 kernel: audit: type=1400 audit(1696282948.995:982): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:28.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.127593 kernel: audit: type=1400 audit(1696282948.995:983): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:28.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.144008 env[1351]: time="2023-10-02T21:42:29.143939571Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:42:29.144238 env[1351]: time="2023-10-02T21:42:29.144214330Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:42:29.144335 env[1351]: time="2023-10-02T21:42:29.144313889Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:42:29.145582 env[1351]: time="2023-10-02T21:42:29.145536962Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094 pid=2622 runtime=io.containerd.runc.v2 Oct 2 21:42:29.148756 kernel: audit: type=1400 audit(1696282948.995:984): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:28.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.169798 kernel: audit: type=1400 audit(1696282948.995:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.189502 kernel: audit: type=1400 audit(1696282949.023:986): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.023000 audit: BPF prog-id=107 op=LOAD Oct 2 21:42:29.200105 kernel: audit: type=1334 audit(1696282949.023:987): prog-id=107 op=LOAD Oct 2 21:42:29.203548 systemd[1]: Started cri-containerd-09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094.scope. Oct 2 21:42:29.023000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.205599 env[1351]: time="2023-10-02T21:42:29.205562471Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-6gl4f,Uid:7e1075dd-f05c-4ae0-9137-ebe7b06a992f,Namespace:kube-system,Attempt:0,} returns sandbox id \"e6bdb08d86ef3b39bad7c66711a0646ceada195e01e4b9a7e4a71eb03d77fae2\"" Oct 2 21:42:29.222666 kernel: audit: type=1400 audit(1696282949.023:988): avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.023000 audit[2598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2587 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.250563 kernel: audit: type=1300 audit(1696282949.023:988): arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2587 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536626462303864383665663362333962616437633636373131613036 Oct 2 21:42:29.251797 env[1351]: time="2023-10-02T21:42:29.251765506Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-k9nq4,Uid:cbfbcf26-6e75-44ea-aa34-8d9a81082c88,Namespace:kube-system,Attempt:0,}" Oct 2 21:42:29.276735 kernel: audit: type=1327 audit(1696282949.023:988): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536626462303864383665663362333962616437633636373131613036 Oct 2 21:42:29.278199 kernel: audit: type=1400 audit(1696282949.023:989): avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.023000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.297474 env[1351]: time="2023-10-02T21:42:29.297423984Z" level=info msg="CreateContainer within sandbox \"e6bdb08d86ef3b39bad7c66711a0646ceada195e01e4b9a7e4a71eb03d77fae2\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 21:42:29.023000 audit[2598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2587 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.324448 kernel: audit: type=1300 audit(1696282949.023:989): arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2587 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536626462303864383665663362333962616437633636373131613036 Oct 2 21:42:29.023000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.023000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.023000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.023000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.023000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.023000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.023000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.023000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.023000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.023000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.023000 audit: BPF prog-id=108 op=LOAD Oct 2 21:42:29.023000 audit[2598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2587 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536626462303864383665663362333962616437633636373131613036 Oct 2 21:42:29.042000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.042000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.042000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.042000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.042000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.042000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.042000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.042000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.042000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.042000 audit: BPF prog-id=109 op=LOAD Oct 2 21:42:29.042000 audit[2598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2587 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536626462303864383665663362333962616437633636373131613036 Oct 2 21:42:29.049000 audit: BPF prog-id=109 op=UNLOAD Oct 2 21:42:29.049000 audit: BPF prog-id=108 op=UNLOAD Oct 2 21:42:29.049000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.049000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.049000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.049000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.049000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.049000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.049000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.049000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.049000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.049000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.049000 audit: BPF prog-id=110 op=LOAD Oct 2 21:42:29.049000 audit[2598]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2587 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536626462303864383665663362333962616437633636373131613036 Oct 2 21:42:29.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.324000 audit: BPF prog-id=111 op=LOAD Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2622 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039383938656666356265313733666665653764376266316361323532 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2622 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039383938656666356265313733666665653764376266316361323532 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit: BPF prog-id=112 op=LOAD Oct 2 21:42:29.325000 audit[2633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2622 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039383938656666356265313733666665653764376266316361323532 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit: BPF prog-id=113 op=LOAD Oct 2 21:42:29.325000 audit[2633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2622 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039383938656666356265313733666665653764376266316361323532 Oct 2 21:42:29.325000 audit: BPF prog-id=113 op=UNLOAD Oct 2 21:42:29.325000 audit: BPF prog-id=112 op=UNLOAD Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { perfmon } for pid=2633 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit[2633]: AVC avc: denied { bpf } for pid=2633 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.325000 audit: BPF prog-id=114 op=LOAD Oct 2 21:42:29.325000 audit[2633]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2622 pid=2633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039383938656666356265313733666665653764376266316361323532 Oct 2 21:42:29.354585 env[1351]: time="2023-10-02T21:42:29.354523152Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-lsfns,Uid:be41ff3c-3a55-45fb-a00c-e18b6cb9046a,Namespace:kube-system,Attempt:0,} returns sandbox id \"09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094\"" Oct 2 21:42:29.360380 env[1351]: time="2023-10-02T21:42:29.360330396Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 21:42:29.369172 env[1351]: time="2023-10-02T21:42:29.369101302Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:42:29.369418 env[1351]: time="2023-10-02T21:42:29.369378540Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:42:29.369509 env[1351]: time="2023-10-02T21:42:29.369399780Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:42:29.369880 env[1351]: time="2023-10-02T21:42:29.369796897Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751 pid=2670 runtime=io.containerd.runc.v2 Oct 2 21:42:29.378958 env[1351]: time="2023-10-02T21:42:29.378910001Z" level=info msg="CreateContainer within sandbox \"e6bdb08d86ef3b39bad7c66711a0646ceada195e01e4b9a7e4a71eb03d77fae2\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"a36a0c08fcdb65d0d394e4c5963e23a500a10c7a840b26ab13b3c6d0bd527cac\"" Oct 2 21:42:29.381212 env[1351]: time="2023-10-02T21:42:29.380626311Z" level=info msg="StartContainer for \"a36a0c08fcdb65d0d394e4c5963e23a500a10c7a840b26ab13b3c6d0bd527cac\"" Oct 2 21:42:29.388525 systemd[1]: Started cri-containerd-fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751.scope. Oct 2 21:42:29.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.409000 audit: BPF prog-id=115 op=LOAD Oct 2 21:42:29.410000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.410000 audit[2681]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2670 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.410000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393831656362656430323564633364396137663932303336616135 Oct 2 21:42:29.411000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.411000 audit[2681]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2670 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.411000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393831656362656430323564633364396137663932303336616135 Oct 2 21:42:29.411000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.411000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.411000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.411000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.411000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.411000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.411000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.411000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.411000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.411000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.411000 audit: BPF prog-id=116 op=LOAD Oct 2 21:42:29.411000 audit[2681]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2670 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.411000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393831656362656430323564633364396137663932303336616135 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit: BPF prog-id=117 op=LOAD Oct 2 21:42:29.412000 audit[2681]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2670 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393831656362656430323564633364396137663932303336616135 Oct 2 21:42:29.412000 audit: BPF prog-id=117 op=UNLOAD Oct 2 21:42:29.412000 audit: BPF prog-id=116 op=UNLOAD Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.412000 audit: BPF prog-id=118 op=LOAD Oct 2 21:42:29.412000 audit[2681]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2670 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393831656362656430323564633364396137663932303336616135 Oct 2 21:42:29.416876 systemd[1]: Started cri-containerd-a36a0c08fcdb65d0d394e4c5963e23a500a10c7a840b26ab13b3c6d0bd527cac.scope. Oct 2 21:42:29.438508 env[1351]: time="2023-10-02T21:42:29.438380674Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-k9nq4,Uid:cbfbcf26-6e75-44ea-aa34-8d9a81082c88,Namespace:kube-system,Attempt:0,} returns sandbox id \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\"" Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2587 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133366130633038666364623635643064333934653463353936336532 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { bpf } for pid=2700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { bpf } for pid=2700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { bpf } for pid=2700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { bpf } for pid=2700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { bpf } for pid=2700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit: BPF prog-id=119 op=LOAD Oct 2 21:42:29.449000 audit[2700]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2587 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133366130633038666364623635643064333934653463353936336532 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { bpf } for pid=2700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { bpf } for pid=2700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { bpf } for pid=2700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { bpf } for pid=2700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit: BPF prog-id=120 op=LOAD Oct 2 21:42:29.449000 audit[2700]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2587 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133366130633038666364623635643064333934653463353936336532 Oct 2 21:42:29.449000 audit: BPF prog-id=120 op=UNLOAD Oct 2 21:42:29.449000 audit: BPF prog-id=119 op=UNLOAD Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { bpf } for pid=2700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { bpf } for pid=2700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { bpf } for pid=2700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { perfmon } for pid=2700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { bpf } for pid=2700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit[2700]: AVC avc: denied { bpf } for pid=2700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:29.449000 audit: BPF prog-id=121 op=LOAD Oct 2 21:42:29.449000 audit[2700]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2587 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133366130633038666364623635643064333934653463353936336532 Oct 2 21:42:29.472953 env[1351]: time="2023-10-02T21:42:29.472903301Z" level=info msg="StartContainer for \"a36a0c08fcdb65d0d394e4c5963e23a500a10c7a840b26ab13b3c6d0bd527cac\" returns successfully" Oct 2 21:42:29.540000 audit[2759]: NETFILTER_CFG table=mangle:62 family=2 entries=1 op=nft_register_chain pid=2759 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.540000 audit[2759]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd2292bb0 a2=0 a3=ffff99efe6c0 items=0 ppid=2716 pid=2759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.540000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 21:42:29.543000 audit[2760]: NETFILTER_CFG table=mangle:63 family=10 entries=1 op=nft_register_chain pid=2760 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.543000 audit[2760]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdb7f16a0 a2=0 a3=ffff92df26c0 items=0 ppid=2716 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.543000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 21:42:29.548000 audit[2762]: NETFILTER_CFG table=nat:64 family=10 entries=1 op=nft_register_chain pid=2762 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.548000 audit[2762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff88d20e0 a2=0 a3=ffff8d9416c0 items=0 ppid=2716 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.548000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 21:42:29.549000 audit[2761]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_chain pid=2761 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.549000 audit[2761]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffecc3ae10 a2=0 a3=ffff8bb116c0 items=0 ppid=2716 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.549000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 21:42:29.550000 audit[2763]: NETFILTER_CFG table=filter:66 family=10 entries=1 op=nft_register_chain pid=2763 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.550000 audit[2763]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffe3e1c10 a2=0 a3=ffff8f6966c0 items=0 ppid=2716 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.550000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 21:42:29.552000 audit[2764]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_chain pid=2764 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.552000 audit[2764]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd0143650 a2=0 a3=ffffb6ade6c0 items=0 ppid=2716 pid=2764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.552000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 21:42:29.642000 audit[2765]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2765 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.642000 audit[2765]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe78bd360 a2=0 a3=ffffa96fc6c0 items=0 ppid=2716 pid=2765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.642000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 21:42:29.646000 audit[2767]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2767 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.646000 audit[2767]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe1643630 a2=0 a3=ffff979d16c0 items=0 ppid=2716 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.646000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 21:42:29.652000 audit[2770]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_rule pid=2770 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.652000 audit[2770]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffdd9f8120 a2=0 a3=ffff93a006c0 items=0 ppid=2716 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.652000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 21:42:29.654000 audit[2771]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_chain pid=2771 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.654000 audit[2771]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffffe30810 a2=0 a3=ffffb3ba06c0 items=0 ppid=2716 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.654000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 21:42:29.657000 audit[2773]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2773 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.657000 audit[2773]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff759bfc0 a2=0 a3=ffff9a4ee6c0 items=0 ppid=2716 pid=2773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.657000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 21:42:29.659000 audit[2774]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.659000 audit[2774]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe627d930 a2=0 a3=ffff999446c0 items=0 ppid=2716 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.659000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 21:42:29.663000 audit[2776]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2776 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.663000 audit[2776]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe45f9110 a2=0 a3=ffffa81be6c0 items=0 ppid=2716 pid=2776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.663000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 21:42:29.669000 audit[2779]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_rule pid=2779 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.669000 audit[2779]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc41593a0 a2=0 a3=ffff835446c0 items=0 ppid=2716 pid=2779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.669000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 21:42:29.670000 audit[2780]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_chain pid=2780 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.670000 audit[2780]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc9746980 a2=0 a3=ffff852696c0 items=0 ppid=2716 pid=2780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.670000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 21:42:29.674000 audit[2782]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2782 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.674000 audit[2782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffeef3b510 a2=0 a3=ffff8ea9a6c0 items=0 ppid=2716 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.674000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 21:42:29.676000 audit[2783]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_chain pid=2783 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.676000 audit[2783]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe5882090 a2=0 a3=ffffac4bc6c0 items=0 ppid=2716 pid=2783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.676000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 21:42:29.680000 audit[2785]: NETFILTER_CFG table=filter:79 family=2 entries=1 op=nft_register_rule pid=2785 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.680000 audit[2785]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc5a16aa0 a2=0 a3=ffff9eea06c0 items=0 ppid=2716 pid=2785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.680000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 21:42:29.685000 audit[2788]: NETFILTER_CFG table=filter:80 family=2 entries=1 op=nft_register_rule pid=2788 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.685000 audit[2788]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe2fbdc50 a2=0 a3=ffffb22086c0 items=0 ppid=2716 pid=2788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.685000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 21:42:29.690000 audit[2791]: NETFILTER_CFG table=filter:81 family=2 entries=1 op=nft_register_rule pid=2791 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.690000 audit[2791]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdd61ce50 a2=0 a3=ffffa81196c0 items=0 ppid=2716 pid=2791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.690000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 21:42:29.693000 audit[2792]: NETFILTER_CFG table=nat:82 family=2 entries=1 op=nft_register_chain pid=2792 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.693000 audit[2792]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd42ba990 a2=0 a3=ffff97b9e6c0 items=0 ppid=2716 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.693000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 21:42:29.697000 audit[2794]: NETFILTER_CFG table=nat:83 family=2 entries=1 op=nft_register_rule pid=2794 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.697000 audit[2794]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffe6dcf630 a2=0 a3=ffffa62806c0 items=0 ppid=2716 pid=2794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.697000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:42:29.702000 audit[2797]: NETFILTER_CFG table=nat:84 family=2 entries=1 op=nft_register_rule pid=2797 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 21:42:29.702000 audit[2797]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffef332b80 a2=0 a3=ffffbb2276c0 items=0 ppid=2716 pid=2797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.702000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:42:29.772000 audit[2801]: NETFILTER_CFG table=filter:85 family=2 entries=6 op=nft_register_rule pid=2801 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 21:42:29.772000 audit[2801]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffd5ddba00 a2=0 a3=ffff855306c0 items=0 ppid=2716 pid=2801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.772000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:42:29.798000 audit[2801]: NETFILTER_CFG table=nat:86 family=2 entries=17 op=nft_register_chain pid=2801 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 21:42:29.798000 audit[2801]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffd5ddba00 a2=0 a3=ffff855306c0 items=0 ppid=2716 pid=2801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.798000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:42:29.806000 audit[2805]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2805 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.806000 audit[2805]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff91c9540 a2=0 a3=ffffb51c06c0 items=0 ppid=2716 pid=2805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.806000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 21:42:29.809000 audit[2807]: NETFILTER_CFG table=filter:88 family=10 entries=2 op=nft_register_chain pid=2807 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.809000 audit[2807]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffdcf50c30 a2=0 a3=ffff98f4d6c0 items=0 ppid=2716 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.809000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 21:42:29.816000 audit[2810]: NETFILTER_CFG table=filter:89 family=10 entries=2 op=nft_register_chain pid=2810 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.816000 audit[2810]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffdec185b0 a2=0 a3=ffffa6bec6c0 items=0 ppid=2716 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.816000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 21:42:29.818000 audit[2811]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_chain pid=2811 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.818000 audit[2811]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdd454f70 a2=0 a3=ffff80f516c0 items=0 ppid=2716 pid=2811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.818000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 21:42:29.821000 audit[2813]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_rule pid=2813 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.821000 audit[2813]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc296bb10 a2=0 a3=ffff9006e6c0 items=0 ppid=2716 pid=2813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.821000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 21:42:29.823000 audit[2814]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=2814 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.823000 audit[2814]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdc6f0280 a2=0 a3=ffffb4c9d6c0 items=0 ppid=2716 pid=2814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.823000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 21:42:29.827000 audit[2816]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2816 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.827000 audit[2816]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffec260620 a2=0 a3=ffffa9ef56c0 items=0 ppid=2716 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.827000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 21:42:29.832000 audit[2819]: NETFILTER_CFG table=filter:94 family=10 entries=2 op=nft_register_chain pid=2819 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.832000 audit[2819]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffee64e280 a2=0 a3=ffffb99696c0 items=0 ppid=2716 pid=2819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.832000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 21:42:29.834000 audit[2820]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_chain pid=2820 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.834000 audit[2820]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe2da4d50 a2=0 a3=ffffbe42c6c0 items=0 ppid=2716 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.834000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 21:42:29.838000 audit[2822]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=2822 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.838000 audit[2822]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff198fde0 a2=0 a3=ffffb250a6c0 items=0 ppid=2716 pid=2822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.838000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 21:42:29.840000 audit[2823]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_chain pid=2823 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.840000 audit[2823]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff826ee90 a2=0 a3=ffff8caba6c0 items=0 ppid=2716 pid=2823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.840000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 21:42:29.844000 audit[2825]: NETFILTER_CFG table=filter:98 family=10 entries=1 op=nft_register_rule pid=2825 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.844000 audit[2825]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffeda50cd0 a2=0 a3=ffff82df96c0 items=0 ppid=2716 pid=2825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.844000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 21:42:29.849000 audit[2828]: NETFILTER_CFG table=filter:99 family=10 entries=1 op=nft_register_rule pid=2828 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.849000 audit[2828]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffc17b000 a2=0 a3=ffff8adb56c0 items=0 ppid=2716 pid=2828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.849000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 21:42:29.855000 audit[2831]: NETFILTER_CFG table=filter:100 family=10 entries=1 op=nft_register_rule pid=2831 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.855000 audit[2831]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd504e4c0 a2=0 a3=ffff9c3926c0 items=0 ppid=2716 pid=2831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.855000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 21:42:29.857000 audit[2832]: NETFILTER_CFG table=nat:101 family=10 entries=1 op=nft_register_chain pid=2832 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.857000 audit[2832]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe83a0a10 a2=0 a3=ffff878fe6c0 items=0 ppid=2716 pid=2832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.857000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 21:42:29.860000 audit[2834]: NETFILTER_CFG table=nat:102 family=10 entries=2 op=nft_register_chain pid=2834 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.860000 audit[2834]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff09f68a0 a2=0 a3=ffff8044a6c0 items=0 ppid=2716 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.860000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:42:29.865000 audit[2837]: NETFILTER_CFG table=nat:103 family=10 entries=2 op=nft_register_chain pid=2837 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 21:42:29.865000 audit[2837]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffec85bb60 a2=0 a3=ffff92e5d6c0 items=0 ppid=2716 pid=2837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.865000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 21:42:29.872000 audit[2841]: NETFILTER_CFG table=filter:104 family=10 entries=3 op=nft_register_rule pid=2841 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 21:42:29.872000 audit[2841]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffd77bc740 a2=0 a3=ffffa1a9c6c0 items=0 ppid=2716 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.872000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:42:29.872000 audit[2841]: NETFILTER_CFG table=nat:105 family=10 entries=10 op=nft_register_chain pid=2841 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 21:42:29.872000 audit[2841]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffd77bc740 a2=0 a3=ffffa1a9c6c0 items=0 ppid=2716 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:29.872000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 21:42:30.216514 kubelet[2491]: I1002 21:42:30.216482 2491 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-6gl4f" podStartSLOduration=2.216431706 pod.CreationTimestamp="2023-10-02 21:42:28 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:42:30.213074567 +0000 UTC m=+15.404569010" watchObservedRunningTime="2023-10-02 21:42:30.216431706 +0000 UTC m=+15.407926189" Oct 2 21:42:31.205079 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount76754610.mount: Deactivated successfully. Oct 2 21:42:31.863594 env[1351]: time="2023-10-02T21:42:31.863553785Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:31.869256 env[1351]: time="2023-10-02T21:42:31.869209192Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:31.876821 env[1351]: time="2023-10-02T21:42:31.873709605Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:31.876821 env[1351]: time="2023-10-02T21:42:31.873922764Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 21:42:31.877532 env[1351]: time="2023-10-02T21:42:31.877499983Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 21:42:31.879552 env[1351]: time="2023-10-02T21:42:31.879517932Z" level=info msg="CreateContainer within sandbox \"09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 21:42:31.901777 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3532964494.mount: Deactivated successfully. Oct 2 21:42:31.941474 env[1351]: time="2023-10-02T21:42:31.941416169Z" level=info msg="CreateContainer within sandbox \"09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d\"" Oct 2 21:42:31.941987 env[1351]: time="2023-10-02T21:42:31.941961846Z" level=info msg="StartContainer for \"7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d\"" Oct 2 21:42:31.962971 systemd[1]: Started cri-containerd-7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d.scope. Oct 2 21:42:31.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit: BPF prog-id=122 op=LOAD Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { bpf } for pid=2849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2622 pid=2849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:31.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731373464663763396330376366353731363562366530383761316634 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2622 pid=2849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:31.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731373464663763396330376366353731363562366530383761316634 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { bpf } for pid=2849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { bpf } for pid=2849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { bpf } for pid=2849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { bpf } for pid=2849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { bpf } for pid=2849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit: BPF prog-id=123 op=LOAD Oct 2 21:42:31.982000 audit[2849]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2622 pid=2849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:31.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731373464663763396330376366353731363562366530383761316634 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { bpf } for pid=2849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { bpf } for pid=2849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { bpf } for pid=2849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit[2849]: AVC avc: denied { bpf } for pid=2849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.982000 audit: BPF prog-id=124 op=LOAD Oct 2 21:42:31.982000 audit[2849]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2622 pid=2849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:31.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731373464663763396330376366353731363562366530383761316634 Oct 2 21:42:31.982000 audit: BPF prog-id=124 op=UNLOAD Oct 2 21:42:31.982000 audit: BPF prog-id=123 op=UNLOAD Oct 2 21:42:31.983000 audit[2849]: AVC avc: denied { bpf } for pid=2849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.983000 audit[2849]: AVC avc: denied { bpf } for pid=2849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.983000 audit[2849]: AVC avc: denied { bpf } for pid=2849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.983000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.983000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.983000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.983000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.983000 audit[2849]: AVC avc: denied { perfmon } for pid=2849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.983000 audit[2849]: AVC avc: denied { bpf } for pid=2849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.983000 audit[2849]: AVC avc: denied { bpf } for pid=2849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:42:31.983000 audit: BPF prog-id=125 op=LOAD Oct 2 21:42:31.983000 audit[2849]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2622 pid=2849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:42:31.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731373464663763396330376366353731363562366530383761316634 Oct 2 21:42:32.015306 env[1351]: time="2023-10-02T21:42:32.015249379Z" level=info msg="StartContainer for \"7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d\" returns successfully" Oct 2 21:42:32.048000 audit[2860]: AVC avc: denied { map_create } for pid=2860 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c172,c597 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c172,c597 tclass=bpf permissive=0 Oct 2 21:42:32.048000 audit[2860]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=400063f768 a2=48 a3=0 items=0 ppid=2622 pid=2860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c172,c597 key=(null) Oct 2 21:42:32.048000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 21:42:32.199441 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount133814164.mount: Deactivated successfully. Oct 2 21:42:32.267153 kubelet[2491]: I1002 21:42:32.267124 2491 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-lsfns" podStartSLOduration=-9.223372032587698e+09 pod.CreationTimestamp="2023-10-02 21:42:28 +0000 UTC" firstStartedPulling="2023-10-02 21:42:29.35801641 +0000 UTC m=+14.549510853" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 21:42:32.266745346 +0000 UTC m=+17.458239829" watchObservedRunningTime="2023-10-02 21:42:32.267077865 +0000 UTC m=+17.458572348" Oct 2 21:42:36.430069 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2510259740.mount: Deactivated successfully. Oct 2 21:42:38.933406 env[1351]: time="2023-10-02T21:42:38.933338020Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:38.942806 env[1351]: time="2023-10-02T21:42:38.942750014Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:38.948848 env[1351]: time="2023-10-02T21:42:38.948789585Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 21:42:38.949757 env[1351]: time="2023-10-02T21:42:38.949720900Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 21:42:38.954433 env[1351]: time="2023-10-02T21:42:38.954374717Z" level=info msg="CreateContainer within sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 21:42:38.980245 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount343952427.mount: Deactivated successfully. Oct 2 21:42:38.987901 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1388638214.mount: Deactivated successfully. Oct 2 21:42:39.002563 env[1351]: time="2023-10-02T21:42:39.002500483Z" level=info msg="CreateContainer within sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202\"" Oct 2 21:42:39.004860 env[1351]: time="2023-10-02T21:42:39.003696517Z" level=info msg="StartContainer for \"c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202\"" Oct 2 21:42:39.032020 systemd[1]: Started cri-containerd-c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202.scope. Oct 2 21:42:39.050091 systemd[1]: cri-containerd-c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202.scope: Deactivated successfully. Oct 2 21:42:39.977729 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202-rootfs.mount: Deactivated successfully. Oct 2 21:42:40.688612 env[1351]: time="2023-10-02T21:42:40.688541591Z" level=info msg="shim disconnected" id=c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202 Oct 2 21:42:40.688612 env[1351]: time="2023-10-02T21:42:40.688610431Z" level=warning msg="cleaning up after shim disconnected" id=c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202 namespace=k8s.io Oct 2 21:42:40.688985 env[1351]: time="2023-10-02T21:42:40.688621831Z" level=info msg="cleaning up dead shim" Oct 2 21:42:40.701170 env[1351]: time="2023-10-02T21:42:40.701112293Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:42:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2908 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:42:40Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:42:40.701495 env[1351]: time="2023-10-02T21:42:40.701395812Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 21:42:40.702544 env[1351]: time="2023-10-02T21:42:40.702508566Z" level=error msg="Failed to pipe stdout of container \"c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202\"" error="reading from a closed fifo" Oct 2 21:42:40.703259 env[1351]: time="2023-10-02T21:42:40.703230363Z" level=error msg="Failed to pipe stderr of container \"c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202\"" error="reading from a closed fifo" Oct 2 21:42:40.708658 env[1351]: time="2023-10-02T21:42:40.708573098Z" level=error msg="StartContainer for \"c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:42:40.709211 kubelet[2491]: E1002 21:42:40.708957 2491 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202" Oct 2 21:42:40.709211 kubelet[2491]: E1002 21:42:40.709095 2491 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:42:40.709211 kubelet[2491]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:42:40.709211 kubelet[2491]: rm /hostbin/cilium-mount Oct 2 21:42:40.709561 kubelet[2491]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-q9hwv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:42:40.709633 kubelet[2491]: E1002 21:42:40.709144 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:42:41.236232 env[1351]: time="2023-10-02T21:42:41.236168640Z" level=info msg="CreateContainer within sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 21:42:41.277493 env[1351]: time="2023-10-02T21:42:41.277438774Z" level=info msg="CreateContainer within sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f\"" Oct 2 21:42:41.278534 env[1351]: time="2023-10-02T21:42:41.278509489Z" level=info msg="StartContainer for \"08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f\"" Oct 2 21:42:41.317103 systemd[1]: run-containerd-runc-k8s.io-08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f-runc.Tg2gDA.mount: Deactivated successfully. Oct 2 21:42:41.319423 systemd[1]: Started cri-containerd-08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f.scope. Oct 2 21:42:41.345146 systemd[1]: cri-containerd-08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f.scope: Deactivated successfully. Oct 2 21:42:41.363757 env[1351]: time="2023-10-02T21:42:41.363700904Z" level=info msg="shim disconnected" id=08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f Oct 2 21:42:41.363757 env[1351]: time="2023-10-02T21:42:41.363751504Z" level=warning msg="cleaning up after shim disconnected" id=08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f namespace=k8s.io Oct 2 21:42:41.363757 env[1351]: time="2023-10-02T21:42:41.363761824Z" level=info msg="cleaning up dead shim" Oct 2 21:42:41.375321 env[1351]: time="2023-10-02T21:42:41.375256172Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:42:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2945 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:42:41Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:42:41.375606 env[1351]: time="2023-10-02T21:42:41.375551010Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 21:42:41.375803 env[1351]: time="2023-10-02T21:42:41.375770009Z" level=error msg="Failed to pipe stderr of container \"08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f\"" error="reading from a closed fifo" Oct 2 21:42:41.375869 env[1351]: time="2023-10-02T21:42:41.375780049Z" level=error msg="Failed to pipe stdout of container \"08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f\"" error="reading from a closed fifo" Oct 2 21:42:41.380012 env[1351]: time="2023-10-02T21:42:41.379960070Z" level=error msg="StartContainer for \"08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:42:41.380257 kubelet[2491]: E1002 21:42:41.380235 2491 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f" Oct 2 21:42:41.380353 kubelet[2491]: E1002 21:42:41.380333 2491 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:42:41.380353 kubelet[2491]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:42:41.380353 kubelet[2491]: rm /hostbin/cilium-mount Oct 2 21:42:41.380353 kubelet[2491]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-q9hwv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:42:41.380536 kubelet[2491]: E1002 21:42:41.380372 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:42:42.235684 kubelet[2491]: I1002 21:42:42.235642 2491 scope.go:115] "RemoveContainer" containerID="c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202" Oct 2 21:42:42.236248 kubelet[2491]: I1002 21:42:42.236225 2491 scope.go:115] "RemoveContainer" containerID="c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202" Oct 2 21:42:42.237472 env[1351]: time="2023-10-02T21:42:42.237438502Z" level=info msg="RemoveContainer for \"c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202\"" Oct 2 21:42:42.238246 env[1351]: time="2023-10-02T21:42:42.238217498Z" level=info msg="RemoveContainer for \"c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202\"" Oct 2 21:42:42.238432 env[1351]: time="2023-10-02T21:42:42.238401137Z" level=error msg="RemoveContainer for \"c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202\" failed" error="failed to set removing state for container \"c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202\": container is already in removing state" Oct 2 21:42:42.238681 kubelet[2491]: E1002 21:42:42.238648 2491 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202\": container is already in removing state" containerID="c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202" Oct 2 21:42:42.238748 kubelet[2491]: E1002 21:42:42.238723 2491 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202": container is already in removing state; Skipping pod "cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)" Oct 2 21:42:42.239062 kubelet[2491]: E1002 21:42:42.239044 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:42:42.250711 env[1351]: time="2023-10-02T21:42:42.250666923Z" level=info msg="RemoveContainer for \"c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202\" returns successfully" Oct 2 21:42:42.265104 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f-rootfs.mount: Deactivated successfully. Oct 2 21:42:43.242628 kubelet[2491]: E1002 21:42:43.240465 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:42:43.794658 kubelet[2491]: W1002 21:42:43.794621 2491 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podcbfbcf26_6e75_44ea_aa34_8d9a81082c88.slice/cri-containerd-c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202.scope WatchSource:0}: container "c691e0bc14ff43e027950baf0e61473187eb48e2e95a5e5c1515245569e1d202" in namespace "k8s.io": not found Oct 2 21:42:46.901292 kubelet[2491]: W1002 21:42:46.901247 2491 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podcbfbcf26_6e75_44ea_aa34_8d9a81082c88.slice/cri-containerd-08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f.scope WatchSource:0}: task 08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f not found: not found Oct 2 21:42:47.350952 update_engine[1340]: I1002 21:42:47.347075 1340 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 21:42:47.350952 update_engine[1340]: I1002 21:42:47.347103 1340 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 21:42:47.350952 update_engine[1340]: I1002 21:42:47.347375 1340 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 21:42:47.352566 update_engine[1340]: I1002 21:42:47.352316 1340 omaha_request_params.cc:62] Current group set to lts Oct 2 21:42:47.352566 update_engine[1340]: I1002 21:42:47.352439 1340 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 21:42:47.352566 update_engine[1340]: I1002 21:42:47.352444 1340 update_attempter.cc:638] Scheduling an action processor start. Oct 2 21:42:47.352566 update_engine[1340]: I1002 21:42:47.352461 1340 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 21:42:47.352566 update_engine[1340]: I1002 21:42:47.352499 1340 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 21:42:47.352778 locksmithd[1433]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 21:42:47.353021 update_engine[1340]: I1002 21:42:47.352993 1340 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 21:42:47.353021 update_engine[1340]: I1002 21:42:47.353006 1340 omaha_request_action.cc:269] Request: Oct 2 21:42:47.353021 update_engine[1340]: Oct 2 21:42:47.353021 update_engine[1340]: Oct 2 21:42:47.353021 update_engine[1340]: Oct 2 21:42:47.353021 update_engine[1340]: Oct 2 21:42:47.353021 update_engine[1340]: Oct 2 21:42:47.353021 update_engine[1340]: Oct 2 21:42:47.353021 update_engine[1340]: Oct 2 21:42:47.353021 update_engine[1340]: Oct 2 21:42:47.353021 update_engine[1340]: I1002 21:42:47.353011 1340 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 21:42:47.354749 update_engine[1340]: I1002 21:42:47.354718 1340 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 21:42:47.354936 update_engine[1340]: I1002 21:42:47.354916 1340 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 21:42:48.535995 update_engine[1340]: I1002 21:42:48.535956 1340 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 21:42:48.536325 update_engine[1340]: I1002 21:42:48.536227 1340 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 21:42:48.536415 update_engine[1340]: I1002 21:42:48.536391 1340 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 21:42:48.897890 update_engine[1340]: I1002 21:42:48.897850 1340 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 21:42:48.899497 update_engine[1340]: I1002 21:42:48.899466 1340 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 21:42:48.899497 update_engine[1340]: I1002 21:42:48.899497 1340 omaha_request_action.cc:619] Omaha request response: Oct 2 21:42:48.899497 update_engine[1340]: Oct 2 21:42:48.994476 update_engine[1340]: I1002 21:42:48.994433 1340 omaha_request_action.cc:409] No update. Oct 2 21:42:48.994476 update_engine[1340]: I1002 21:42:48.994474 1340 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 21:42:48.994476 update_engine[1340]: I1002 21:42:48.994479 1340 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 21:42:48.994476 update_engine[1340]: I1002 21:42:48.994483 1340 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 21:42:48.994476 update_engine[1340]: I1002 21:42:48.994485 1340 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 21:42:48.994476 update_engine[1340]: I1002 21:42:48.994488 1340 update_attempter.cc:302] Processing Done. Oct 2 21:42:48.994748 update_engine[1340]: I1002 21:42:48.994503 1340 update_attempter.cc:338] No update. Oct 2 21:42:48.994748 update_engine[1340]: I1002 21:42:48.994514 1340 update_check_scheduler.cc:74] Next update check in 45m17s Oct 2 21:42:48.994853 locksmithd[1433]: LastCheckedTime=1696282968 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 21:42:57.162258 env[1351]: time="2023-10-02T21:42:57.160996859Z" level=info msg="CreateContainer within sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 21:42:57.181931 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1093430364.mount: Deactivated successfully. Oct 2 21:42:57.187428 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3697888151.mount: Deactivated successfully. Oct 2 21:42:57.201633 env[1351]: time="2023-10-02T21:42:57.201579053Z" level=info msg="CreateContainer within sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6\"" Oct 2 21:42:57.202860 env[1351]: time="2023-10-02T21:42:57.202833049Z" level=info msg="StartContainer for \"85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6\"" Oct 2 21:42:57.229504 systemd[1]: Started cri-containerd-85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6.scope. Oct 2 21:42:57.247874 systemd[1]: cri-containerd-85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6.scope: Deactivated successfully. Oct 2 21:42:57.277457 env[1351]: time="2023-10-02T21:42:57.277399098Z" level=info msg="shim disconnected" id=85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6 Oct 2 21:42:57.277457 env[1351]: time="2023-10-02T21:42:57.277452138Z" level=warning msg="cleaning up after shim disconnected" id=85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6 namespace=k8s.io Oct 2 21:42:57.277457 env[1351]: time="2023-10-02T21:42:57.277461058Z" level=info msg="cleaning up dead shim" Oct 2 21:42:57.293530 env[1351]: time="2023-10-02T21:42:57.293467048Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:42:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2985 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:42:57Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:42:57.293809 env[1351]: time="2023-10-02T21:42:57.293737048Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 21:42:57.294293 env[1351]: time="2023-10-02T21:42:57.294250486Z" level=error msg="Failed to pipe stdout of container \"85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6\"" error="reading from a closed fifo" Oct 2 21:42:57.296505 env[1351]: time="2023-10-02T21:42:57.296460479Z" level=error msg="Failed to pipe stderr of container \"85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6\"" error="reading from a closed fifo" Oct 2 21:42:57.300844 env[1351]: time="2023-10-02T21:42:57.300792306Z" level=error msg="StartContainer for \"85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:42:57.301072 kubelet[2491]: E1002 21:42:57.301041 2491 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6" Oct 2 21:42:57.301346 kubelet[2491]: E1002 21:42:57.301158 2491 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:42:57.301346 kubelet[2491]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:42:57.301346 kubelet[2491]: rm /hostbin/cilium-mount Oct 2 21:42:57.301346 kubelet[2491]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-q9hwv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:42:57.301515 kubelet[2491]: E1002 21:42:57.301223 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:42:58.179958 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6-rootfs.mount: Deactivated successfully. Oct 2 21:42:58.266394 kubelet[2491]: I1002 21:42:58.266281 2491 scope.go:115] "RemoveContainer" containerID="08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f" Oct 2 21:42:58.267999 kubelet[2491]: I1002 21:42:58.266897 2491 scope.go:115] "RemoveContainer" containerID="08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f" Oct 2 21:42:58.270190 env[1351]: time="2023-10-02T21:42:58.270143679Z" level=info msg="RemoveContainer for \"08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f\"" Oct 2 21:42:58.270726 env[1351]: time="2023-10-02T21:42:58.270217199Z" level=info msg="RemoveContainer for \"08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f\"" Oct 2 21:42:58.270978 env[1351]: time="2023-10-02T21:42:58.270938717Z" level=error msg="RemoveContainer for \"08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f\" failed" error="failed to set removing state for container \"08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f\": container is already in removing state" Oct 2 21:42:58.271209 kubelet[2491]: E1002 21:42:58.271138 2491 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f\": container is already in removing state" containerID="08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f" Oct 2 21:42:58.278215 kubelet[2491]: I1002 21:42:58.274233 2491 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f} err="rpc error: code = Unknown desc = failed to set removing state for container \"08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f\": container is already in removing state" Oct 2 21:42:58.285586 env[1351]: time="2023-10-02T21:42:58.285523632Z" level=info msg="RemoveContainer for \"08e029e9e44dc36c0eaafb2db964771655ec8329fe72c756111a4afd8d51bf2f\" returns successfully" Oct 2 21:42:58.286143 kubelet[2491]: E1002 21:42:58.286109 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:43:00.382786 kubelet[2491]: W1002 21:43:00.382746 2491 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podcbfbcf26_6e75_44ea_aa34_8d9a81082c88.slice/cri-containerd-85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6.scope WatchSource:0}: task 85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6 not found: not found Oct 2 21:43:10.382000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:10.388406 kernel: kauditd_printk_skb: 390 callbacks suppressed Oct 2 21:43:10.388510 kernel: audit: type=1400 audit(1696282990.382:1100): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:10.382000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002701170 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:43:10.441457 kernel: audit: type=1300 audit(1696282990.382:1100): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002701170 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:43:10.382000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:43:10.467009 kernel: audit: type=1327 audit(1696282990.382:1100): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:43:10.467140 kernel: audit: type=1400 audit(1696282990.382:1101): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:10.382000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:10.382000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002788d60 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:43:10.517819 kernel: audit: type=1300 audit(1696282990.382:1101): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002788d60 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:43:10.382000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:43:10.542146 kernel: audit: type=1327 audit(1696282990.382:1101): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:43:11.591000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:11.591000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4008cc71a0 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:43:11.643280 kernel: audit: type=1400 audit(1696282991.591:1102): avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:11.643410 kernel: audit: type=1300 audit(1696282991.591:1102): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4008cc71a0 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:43:11.591000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:43:11.668096 kernel: audit: type=1327 audit(1696282991.591:1102): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:43:11.599000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:11.691855 kernel: audit: type=1400 audit(1696282991.599:1103): avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:11.599000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4008cb78c0 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:43:11.599000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:43:11.607000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:11.607000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40041acd00 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:43:11.607000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:43:11.621000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:11.621000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40041acd40 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:43:11.621000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:43:11.621000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:11.621000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4008cb7a10 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:43:11.621000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:43:11.640000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:11.640000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4008cc7320 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:43:11.640000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:43:12.158502 kubelet[2491]: E1002 21:43:12.158476 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:43:14.020000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:14.020000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400192f640 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:43:14.020000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:14.020000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001b704a0 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:43:14.020000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:43:14.021000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:14.021000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001b706e0 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:43:14.021000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:43:14.022000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:43:14.022000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001b70800 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:43:14.022000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:43:14.020000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:43:23.161697 env[1351]: time="2023-10-02T21:43:23.160770057Z" level=info msg="CreateContainer within sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 21:43:23.180616 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2655978845.mount: Deactivated successfully. Oct 2 21:43:23.185294 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount196346573.mount: Deactivated successfully. Oct 2 21:43:23.199359 env[1351]: time="2023-10-02T21:43:23.199310424Z" level=info msg="CreateContainer within sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda\"" Oct 2 21:43:23.200277 env[1351]: time="2023-10-02T21:43:23.200251023Z" level=info msg="StartContainer for \"4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda\"" Oct 2 21:43:23.222172 systemd[1]: Started cri-containerd-4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda.scope. Oct 2 21:43:23.238677 systemd[1]: cri-containerd-4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda.scope: Deactivated successfully. Oct 2 21:43:23.273579 env[1351]: time="2023-10-02T21:43:23.273530164Z" level=info msg="shim disconnected" id=4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda Oct 2 21:43:23.273863 env[1351]: time="2023-10-02T21:43:23.273842803Z" level=warning msg="cleaning up after shim disconnected" id=4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda namespace=k8s.io Oct 2 21:43:23.273951 env[1351]: time="2023-10-02T21:43:23.273931723Z" level=info msg="cleaning up dead shim" Oct 2 21:43:23.286437 env[1351]: time="2023-10-02T21:43:23.286389699Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:43:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3024 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:43:23Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:43:23.286871 env[1351]: time="2023-10-02T21:43:23.286813259Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 21:43:23.287259 env[1351]: time="2023-10-02T21:43:23.287227658Z" level=error msg="Failed to pipe stdout of container \"4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda\"" error="reading from a closed fifo" Oct 2 21:43:23.287410 env[1351]: time="2023-10-02T21:43:23.287344458Z" level=error msg="Failed to pipe stderr of container \"4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda\"" error="reading from a closed fifo" Oct 2 21:43:23.291788 env[1351]: time="2023-10-02T21:43:23.291739889Z" level=error msg="StartContainer for \"4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:43:23.292139 kubelet[2491]: E1002 21:43:23.292108 2491 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda" Oct 2 21:43:23.292445 kubelet[2491]: E1002 21:43:23.292246 2491 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:43:23.292445 kubelet[2491]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:43:23.292445 kubelet[2491]: rm /hostbin/cilium-mount Oct 2 21:43:23.292445 kubelet[2491]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-q9hwv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:43:23.292610 kubelet[2491]: E1002 21:43:23.292281 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:43:23.306712 kubelet[2491]: I1002 21:43:23.306678 2491 scope.go:115] "RemoveContainer" containerID="85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6" Oct 2 21:43:23.307092 kubelet[2491]: I1002 21:43:23.307071 2491 scope.go:115] "RemoveContainer" containerID="85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6" Oct 2 21:43:23.312349 env[1351]: time="2023-10-02T21:43:23.312307090Z" level=info msg="RemoveContainer for \"85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6\"" Oct 2 21:43:23.318874 env[1351]: time="2023-10-02T21:43:23.318833078Z" level=info msg="RemoveContainer for \"85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6\"" Oct 2 21:43:23.319124 env[1351]: time="2023-10-02T21:43:23.319091278Z" level=error msg="RemoveContainer for \"85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6\" failed" error="failed to set removing state for container \"85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6\": container is already in removing state" Oct 2 21:43:23.320147 kubelet[2491]: E1002 21:43:23.320124 2491 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6\": container is already in removing state" containerID="85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6" Oct 2 21:43:23.320263 kubelet[2491]: I1002 21:43:23.320168 2491 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6} err="rpc error: code = Unknown desc = failed to set removing state for container \"85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6\": container is already in removing state" Oct 2 21:43:23.325115 env[1351]: time="2023-10-02T21:43:23.325066626Z" level=info msg="RemoveContainer for \"85eca6f0a7423f20db0049cea9a5e97e139aa9c111940e6969af326d5a6e6ab6\" returns successfully" Oct 2 21:43:23.325575 kubelet[2491]: E1002 21:43:23.325552 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:43:24.178745 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda-rootfs.mount: Deactivated successfully. Oct 2 21:43:26.377960 kubelet[2491]: W1002 21:43:26.377915 2491 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podcbfbcf26_6e75_44ea_aa34_8d9a81082c88.slice/cri-containerd-4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda.scope WatchSource:0}: task 4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda not found: not found Oct 2 21:43:37.158778 kubelet[2491]: E1002 21:43:37.158113 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:43:48.157861 kubelet[2491]: E1002 21:43:48.157830 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:43:59.158314 kubelet[2491]: E1002 21:43:59.158273 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:44:10.163212 env[1351]: time="2023-10-02T21:44:10.162600560Z" level=info msg="CreateContainer within sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 21:44:10.182164 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3181101654.mount: Deactivated successfully. Oct 2 21:44:10.187175 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2523103941.mount: Deactivated successfully. Oct 2 21:44:10.201129 env[1351]: time="2023-10-02T21:44:10.201075115Z" level=info msg="CreateContainer within sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56\"" Oct 2 21:44:10.201699 env[1351]: time="2023-10-02T21:44:10.201672514Z" level=info msg="StartContainer for \"07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56\"" Oct 2 21:44:10.225367 systemd[1]: Started cri-containerd-07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56.scope. Oct 2 21:44:10.240525 systemd[1]: cri-containerd-07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56.scope: Deactivated successfully. Oct 2 21:44:10.263812 env[1351]: time="2023-10-02T21:44:10.262924483Z" level=info msg="shim disconnected" id=07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56 Oct 2 21:44:10.263812 env[1351]: time="2023-10-02T21:44:10.262983403Z" level=warning msg="cleaning up after shim disconnected" id=07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56 namespace=k8s.io Oct 2 21:44:10.263812 env[1351]: time="2023-10-02T21:44:10.262994203Z" level=info msg="cleaning up dead shim" Oct 2 21:44:10.276926 env[1351]: time="2023-10-02T21:44:10.276863427Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:44:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3067 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:44:10Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:44:10.277228 env[1351]: time="2023-10-02T21:44:10.277150506Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 21:44:10.280379 env[1351]: time="2023-10-02T21:44:10.280298703Z" level=error msg="Failed to pipe stdout of container \"07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56\"" error="reading from a closed fifo" Oct 2 21:44:10.280458 env[1351]: time="2023-10-02T21:44:10.280398623Z" level=error msg="Failed to pipe stderr of container \"07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56\"" error="reading from a closed fifo" Oct 2 21:44:10.284375 env[1351]: time="2023-10-02T21:44:10.284328138Z" level=error msg="StartContainer for \"07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:44:10.285231 kubelet[2491]: E1002 21:44:10.284577 2491 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56" Oct 2 21:44:10.285231 kubelet[2491]: E1002 21:44:10.284685 2491 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:44:10.285231 kubelet[2491]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:44:10.285231 kubelet[2491]: rm /hostbin/cilium-mount Oct 2 21:44:10.285660 kubelet[2491]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-q9hwv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:44:10.285722 kubelet[2491]: E1002 21:44:10.284730 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:44:10.378145 kubelet[2491]: I1002 21:44:10.377832 2491 scope.go:115] "RemoveContainer" containerID="4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda" Oct 2 21:44:10.378145 kubelet[2491]: I1002 21:44:10.378118 2491 scope.go:115] "RemoveContainer" containerID="4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda" Oct 2 21:44:10.381606 env[1351]: time="2023-10-02T21:44:10.381550465Z" level=info msg="RemoveContainer for \"4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda\"" Oct 2 21:44:10.381935 env[1351]: time="2023-10-02T21:44:10.381908464Z" level=info msg="RemoveContainer for \"4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda\"" Oct 2 21:44:10.382037 env[1351]: time="2023-10-02T21:44:10.381978824Z" level=error msg="RemoveContainer for \"4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda\" failed" error="failed to set removing state for container \"4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda\": container is already in removing state" Oct 2 21:44:10.382746 kubelet[2491]: E1002 21:44:10.382211 2491 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda\": container is already in removing state" containerID="4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda" Oct 2 21:44:10.382746 kubelet[2491]: E1002 21:44:10.382241 2491 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda": container is already in removing state; Skipping pod "cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)" Oct 2 21:44:10.382746 kubelet[2491]: E1002 21:44:10.382483 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:44:10.404080 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 21:44:10.404234 kernel: audit: type=1400 audit(1696283050.382:1112): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:10.382000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:10.382000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d34570 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:44:10.443610 kernel: audit: type=1300 audit(1696283050.382:1112): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d34570 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:44:10.382000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:44:10.469202 kernel: audit: type=1327 audit(1696283050.382:1112): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:44:10.384000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:10.472499 env[1351]: time="2023-10-02T21:44:10.472462759Z" level=info msg="RemoveContainer for \"4efe9c77fb0fba0e1a2c64f8201cca7d76872ebf4b50a02c8e7c94e8c6010eda\" returns successfully" Oct 2 21:44:10.493040 kernel: audit: type=1400 audit(1696283050.384:1113): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:10.384000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f148a0 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:44:10.522794 kernel: audit: type=1300 audit(1696283050.384:1113): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f148a0 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:44:10.384000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:44:10.550598 kernel: audit: type=1327 audit(1696283050.384:1113): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:44:11.180005 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56-rootfs.mount: Deactivated successfully. Oct 2 21:44:11.592000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:11.592000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400cd57d70 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:44:11.644715 kernel: audit: type=1400 audit(1696283051.592:1114): avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:11.644804 kernel: audit: type=1300 audit(1696283051.592:1114): arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400cd57d70 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:44:11.592000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:44:11.669734 kernel: audit: type=1327 audit(1696283051.592:1114): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:44:11.615000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:11.692060 kernel: audit: type=1400 audit(1696283051.615:1115): avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:11.615000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400d00a860 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:44:11.615000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:44:11.615000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:11.615000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400cd57da0 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:44:11.615000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:44:11.644000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:11.644000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400cd57dd0 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:44:11.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:44:11.644000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:11.644000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400d00a980 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:44:11.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:44:11.644000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:11.644000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400cd57e60 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:44:11.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:44:13.370834 kubelet[2491]: W1002 21:44:13.370795 2491 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podcbfbcf26_6e75_44ea_aa34_8d9a81082c88.slice/cri-containerd-07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56.scope WatchSource:0}: task 07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56 not found: not found Oct 2 21:44:14.021000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:14.022000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:14.022000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40014f7020 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:44:14.022000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:44:14.021000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f14960 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:44:14.022000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:14.021000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:44:14.022000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40014f7040 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:44:14.022000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:44:14.022000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:44:14.022000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000f14980 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:44:14.022000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:44:14.968193 kubelet[2491]: E1002 21:44:14.968148 2491 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 21:44:15.141518 kubelet[2491]: E1002 21:44:15.141495 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:44:20.142803 kubelet[2491]: E1002 21:44:20.142769 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:44:25.143986 kubelet[2491]: E1002 21:44:25.143960 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:44:26.158389 kubelet[2491]: E1002 21:44:26.158361 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:44:30.145229 kubelet[2491]: E1002 21:44:30.145203 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:44:35.146566 kubelet[2491]: E1002 21:44:35.146526 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:44:37.159163 kubelet[2491]: E1002 21:44:37.159123 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:44:40.147453 kubelet[2491]: E1002 21:44:40.147419 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:44:45.148298 kubelet[2491]: E1002 21:44:45.148262 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:44:50.150138 kubelet[2491]: E1002 21:44:50.150111 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:44:50.157889 kubelet[2491]: E1002 21:44:50.157865 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:44:53.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.15:22-10.200.12.6:36414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:44:53.629794 systemd[1]: Started sshd@7-10.200.20.15:22-10.200.12.6:36414.service. Oct 2 21:44:53.635120 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 21:44:53.635272 kernel: audit: type=1130 audit(1696283093.628:1124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.15:22-10.200.12.6:36414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:44:54.026000 audit[3085]: USER_ACCT pid=3085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:44:54.027867 sshd[3085]: Accepted publickey for core from 10.200.12.6 port 36414 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:44:54.032413 sshd[3085]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:44:54.030000 audit[3085]: CRED_ACQ pid=3085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:44:54.072978 kernel: audit: type=1101 audit(1696283094.026:1125): pid=3085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:44:54.073084 kernel: audit: type=1103 audit(1696283094.030:1126): pid=3085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:44:54.087212 kernel: audit: type=1006 audit(1696283094.030:1127): pid=3085 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 21:44:54.087389 kernel: audit: type=1300 audit(1696283094.030:1127): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc90da420 a2=3 a3=1 items=0 ppid=1 pid=3085 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:44:54.030000 audit[3085]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc90da420 a2=3 a3=1 items=0 ppid=1 pid=3085 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:44:54.030000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:44:54.113226 systemd[1]: Started session-10.scope. Oct 2 21:44:54.114914 systemd-logind[1339]: New session 10 of user core. Oct 2 21:44:54.118807 kernel: audit: type=1327 audit(1696283094.030:1127): proctitle=737368643A20636F7265205B707269765D Oct 2 21:44:54.118000 audit[3085]: USER_START pid=3085 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:44:54.146092 kernel: audit: type=1105 audit(1696283094.118:1128): pid=3085 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:44:54.146258 kernel: audit: type=1103 audit(1696283094.144:1129): pid=3087 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:44:54.144000 audit[3087]: CRED_ACQ pid=3087 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:44:54.495460 sshd[3085]: pam_unix(sshd:session): session closed for user core Oct 2 21:44:54.495000 audit[3085]: USER_END pid=3085 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:44:54.500087 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 21:44:54.500878 systemd[1]: sshd@7-10.200.20.15:22-10.200.12.6:36414.service: Deactivated successfully. Oct 2 21:44:54.497000 audit[3085]: CRED_DISP pid=3085 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:44:54.522469 systemd-logind[1339]: Session 10 logged out. Waiting for processes to exit. Oct 2 21:44:54.543769 kernel: audit: type=1106 audit(1696283094.495:1130): pid=3085 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:44:54.543872 kernel: audit: type=1104 audit(1696283094.497:1131): pid=3085 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:44:54.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.15:22-10.200.12.6:36414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:44:54.544435 systemd-logind[1339]: Removed session 10. Oct 2 21:44:55.151948 kubelet[2491]: E1002 21:44:55.151921 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:45:00.153508 kubelet[2491]: E1002 21:45:00.153475 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:45:04.157950 kubelet[2491]: E1002 21:45:04.157917 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:45:04.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.15:22-10.200.12.6:40272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:04.562519 systemd[1]: Started sshd@8-10.200.20.15:22-10.200.12.6:40272.service. Oct 2 21:45:04.568203 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:45:04.568312 kernel: audit: type=1130 audit(1696283104.561:1133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.15:22-10.200.12.6:40272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:04.959000 audit[3109]: USER_ACCT pid=3109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:04.961265 sshd[3109]: Accepted publickey for core from 10.200.12.6 port 40272 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:45:04.963591 sshd[3109]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:45:04.962000 audit[3109]: CRED_ACQ pid=3109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:05.006600 kernel: audit: type=1101 audit(1696283104.959:1134): pid=3109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:05.006705 kernel: audit: type=1103 audit(1696283104.962:1135): pid=3109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:05.020794 kernel: audit: type=1006 audit(1696283104.962:1136): pid=3109 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 21:45:04.962000 audit[3109]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa84c1d0 a2=3 a3=1 items=0 ppid=1 pid=3109 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:45:05.045625 kernel: audit: type=1300 audit(1696283104.962:1136): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa84c1d0 a2=3 a3=1 items=0 ppid=1 pid=3109 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:45:04.962000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:45:05.048846 systemd[1]: Started session-11.scope. Oct 2 21:45:05.050614 systemd-logind[1339]: New session 11 of user core. Oct 2 21:45:05.057859 kernel: audit: type=1327 audit(1696283104.962:1136): proctitle=737368643A20636F7265205B707269765D Oct 2 21:45:05.061000 audit[3109]: USER_START pid=3109 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:05.088000 audit[3111]: CRED_ACQ pid=3111 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:05.112337 kernel: audit: type=1105 audit(1696283105.061:1137): pid=3109 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:05.112474 kernel: audit: type=1103 audit(1696283105.088:1138): pid=3111 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:05.154453 kubelet[2491]: E1002 21:45:05.154406 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:45:05.387267 sshd[3109]: pam_unix(sshd:session): session closed for user core Oct 2 21:45:05.387000 audit[3109]: USER_END pid=3109 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:05.416359 systemd[1]: sshd@8-10.200.20.15:22-10.200.12.6:40272.service: Deactivated successfully. Oct 2 21:45:05.417095 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 21:45:05.388000 audit[3109]: CRED_DISP pid=3109 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:05.418034 systemd-logind[1339]: Session 11 logged out. Waiting for processes to exit. Oct 2 21:45:05.439816 kernel: audit: type=1106 audit(1696283105.387:1139): pid=3109 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:05.439943 kernel: audit: type=1104 audit(1696283105.388:1140): pid=3109 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:05.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.15:22-10.200.12.6:40272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:05.440566 systemd-logind[1339]: Removed session 11. Oct 2 21:45:10.155831 kubelet[2491]: E1002 21:45:10.155791 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:45:10.383000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:10.389828 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:45:10.389925 kernel: audit: type=1400 audit(1696283110.383:1142): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:10.384000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:10.434056 kernel: audit: type=1400 audit(1696283110.384:1143): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:10.384000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400192e280 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:45:10.464317 kernel: audit: type=1300 audit(1696283110.384:1143): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400192e280 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:45:10.384000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:45:10.488680 kernel: audit: type=1327 audit(1696283110.384:1143): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:45:10.383000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002445c80 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:45:10.383000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:45:10.544184 kernel: audit: type=1300 audit(1696283110.383:1142): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002445c80 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:45:10.544329 kernel: audit: type=1327 audit(1696283110.383:1142): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:45:11.594000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:11.594000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4008e5fb30 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:45:11.644757 kernel: audit: type=1400 audit(1696283111.594:1144): avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:11.644934 kernel: audit: type=1300 audit(1696283111.594:1144): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4008e5fb30 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:45:11.644985 kernel: audit: type=1327 audit(1696283111.594:1144): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:45:11.594000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:45:11.616000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:11.691576 kernel: audit: type=1400 audit(1696283111.616:1145): avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:11.616000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=4008d1aa80 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:45:11.616000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:45:11.616000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:11.616000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4002df7860 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:45:11.616000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:45:11.644000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:11.644000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4002df7940 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:45:11.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:45:11.644000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:11.644000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4008d1abd0 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:45:11.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:45:11.644000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:11.644000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4008d1ac30 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:45:11.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:45:14.023000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:14.023000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001b70320 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:45:14.023000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:45:14.023000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:14.023000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001b70340 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:45:14.023000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:45:14.024000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:14.024000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400192f420 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:45:14.024000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:45:14.025000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:45:14.025000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400192f440 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:45:14.025000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:45:15.157043 kubelet[2491]: E1002 21:45:15.157007 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:45:15.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.15:22-10.200.12.6:40508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:15.458080 systemd[1]: Started sshd@9-10.200.20.15:22-10.200.12.6:40508.service. Oct 2 21:45:15.463356 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 21:45:15.463463 kernel: audit: type=1130 audit(1696283115.457:1154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.15:22-10.200.12.6:40508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:15.853000 audit[3124]: USER_ACCT pid=3124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:15.855203 sshd[3124]: Accepted publickey for core from 10.200.12.6 port 40508 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:45:15.857249 sshd[3124]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:45:15.855000 audit[3124]: CRED_ACQ pid=3124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:15.899317 kernel: audit: type=1101 audit(1696283115.853:1155): pid=3124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:15.899439 kernel: audit: type=1103 audit(1696283115.855:1156): pid=3124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:15.913938 kernel: audit: type=1006 audit(1696283115.855:1157): pid=3124 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 21:45:15.855000 audit[3124]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe40ddbc0 a2=3 a3=1 items=0 ppid=1 pid=3124 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:45:15.937328 kernel: audit: type=1300 audit(1696283115.855:1157): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe40ddbc0 a2=3 a3=1 items=0 ppid=1 pid=3124 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:45:15.855000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:45:15.946046 kernel: audit: type=1327 audit(1696283115.855:1157): proctitle=737368643A20636F7265205B707269765D Oct 2 21:45:15.946872 systemd-logind[1339]: New session 12 of user core. Oct 2 21:45:15.947398 systemd[1]: Started session-12.scope. Oct 2 21:45:15.950000 audit[3124]: USER_START pid=3124 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:15.978947 kernel: audit: type=1105 audit(1696283115.950:1158): pid=3124 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:15.979042 kernel: audit: type=1103 audit(1696283115.977:1159): pid=3126 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:15.977000 audit[3126]: CRED_ACQ pid=3126 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:16.274387 sshd[3124]: pam_unix(sshd:session): session closed for user core Oct 2 21:45:16.274000 audit[3124]: USER_END pid=3124 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:16.301855 systemd[1]: sshd@9-10.200.20.15:22-10.200.12.6:40508.service: Deactivated successfully. Oct 2 21:45:16.275000 audit[3124]: CRED_DISP pid=3124 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:16.323258 kernel: audit: type=1106 audit(1696283116.274:1160): pid=3124 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:16.323374 kernel: audit: type=1104 audit(1696283116.275:1161): pid=3124 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:16.302622 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 21:45:16.323522 systemd-logind[1339]: Session 12 logged out. Waiting for processes to exit. Oct 2 21:45:16.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.15:22-10.200.12.6:40508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:16.324443 systemd-logind[1339]: Removed session 12. Oct 2 21:45:17.158772 kubelet[2491]: E1002 21:45:17.158729 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:45:20.157907 kubelet[2491]: E1002 21:45:20.157874 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:45:25.158967 kubelet[2491]: E1002 21:45:25.158934 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:45:26.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.15:22-10.200.12.6:53258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:26.342058 systemd[1]: Started sshd@10-10.200.20.15:22-10.200.12.6:53258.service. Oct 2 21:45:26.347387 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:45:26.347562 kernel: audit: type=1130 audit(1696283126.341:1163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.15:22-10.200.12.6:53258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:26.741000 audit[3137]: USER_ACCT pid=3137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:26.743129 sshd[3137]: Accepted publickey for core from 10.200.12.6 port 53258 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:45:26.767132 sshd[3137]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:45:26.765000 audit[3137]: CRED_ACQ pid=3137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:26.772797 systemd[1]: Started session-13.scope. Oct 2 21:45:26.774006 systemd-logind[1339]: New session 13 of user core. Oct 2 21:45:26.789914 kernel: audit: type=1101 audit(1696283126.741:1164): pid=3137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:26.790083 kernel: audit: type=1103 audit(1696283126.765:1165): pid=3137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:26.807923 kernel: audit: type=1006 audit(1696283126.765:1166): pid=3137 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 21:45:26.808066 kernel: audit: type=1300 audit(1696283126.765:1166): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe77db460 a2=3 a3=1 items=0 ppid=1 pid=3137 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:45:26.765000 audit[3137]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe77db460 a2=3 a3=1 items=0 ppid=1 pid=3137 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:45:26.830931 kernel: audit: type=1327 audit(1696283126.765:1166): proctitle=737368643A20636F7265205B707269765D Oct 2 21:45:26.765000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:45:26.778000 audit[3137]: USER_START pid=3137 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:26.863692 kernel: audit: type=1105 audit(1696283126.778:1167): pid=3137 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:26.781000 audit[3140]: CRED_ACQ pid=3140 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:26.884841 kernel: audit: type=1103 audit(1696283126.781:1168): pid=3140 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:27.116464 sshd[3137]: pam_unix(sshd:session): session closed for user core Oct 2 21:45:27.116000 audit[3137]: USER_END pid=3137 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:27.122312 systemd-logind[1339]: Session 13 logged out. Waiting for processes to exit. Oct 2 21:45:27.123594 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 21:45:27.124676 systemd-logind[1339]: Removed session 13. Oct 2 21:45:27.125356 systemd[1]: sshd@10-10.200.20.15:22-10.200.12.6:53258.service: Deactivated successfully. Oct 2 21:45:27.119000 audit[3137]: CRED_DISP pid=3137 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:27.164383 kernel: audit: type=1106 audit(1696283127.116:1169): pid=3137 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:27.164521 kernel: audit: type=1104 audit(1696283127.119:1170): pid=3137 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:27.124000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.15:22-10.200.12.6:53258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:29.158478 kubelet[2491]: E1002 21:45:29.158448 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:45:30.160194 kubelet[2491]: E1002 21:45:30.160151 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:45:35.160680 kubelet[2491]: E1002 21:45:35.160644 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:45:37.197123 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:45:37.197265 kernel: audit: type=1130 audit(1696283137.180:1172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.15:22-10.200.12.6:55344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:37.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.15:22-10.200.12.6:55344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:37.181863 systemd[1]: Started sshd@11-10.200.20.15:22-10.200.12.6:55344.service. Oct 2 21:45:37.584000 audit[3154]: USER_ACCT pid=3154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:37.586071 sshd[3154]: Accepted publickey for core from 10.200.12.6 port 55344 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:45:37.588142 sshd[3154]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:45:37.593781 systemd[1]: Started session-14.scope. Oct 2 21:45:37.595595 systemd-logind[1339]: New session 14 of user core. Oct 2 21:45:37.610218 kernel: audit: type=1101 audit(1696283137.584:1173): pid=3154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:37.586000 audit[3154]: CRED_ACQ pid=3154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:37.664500 kernel: audit: type=1103 audit(1696283137.586:1174): pid=3154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:37.664664 kernel: audit: type=1006 audit(1696283137.586:1175): pid=3154 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 21:45:37.586000 audit[3154]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee4603c0 a2=3 a3=1 items=0 ppid=1 pid=3154 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:45:37.690459 kernel: audit: type=1300 audit(1696283137.586:1175): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee4603c0 a2=3 a3=1 items=0 ppid=1 pid=3154 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:45:37.586000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:45:37.699395 kernel: audit: type=1327 audit(1696283137.586:1175): proctitle=737368643A20636F7265205B707269765D Oct 2 21:45:37.599000 audit[3154]: USER_START pid=3154 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:37.725142 kernel: audit: type=1105 audit(1696283137.599:1176): pid=3154 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:37.602000 audit[3156]: CRED_ACQ pid=3156 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:37.746580 kernel: audit: type=1103 audit(1696283137.602:1177): pid=3156 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:37.944488 sshd[3154]: pam_unix(sshd:session): session closed for user core Oct 2 21:45:37.944000 audit[3154]: USER_END pid=3154 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:37.948776 systemd-logind[1339]: Session 14 logged out. Waiting for processes to exit. Oct 2 21:45:37.949925 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 21:45:37.951153 systemd-logind[1339]: Removed session 14. Oct 2 21:45:37.951784 systemd[1]: sshd@11-10.200.20.15:22-10.200.12.6:55344.service: Deactivated successfully. Oct 2 21:45:37.945000 audit[3154]: CRED_DISP pid=3154 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:37.993776 kernel: audit: type=1106 audit(1696283137.944:1178): pid=3154 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:37.993874 kernel: audit: type=1104 audit(1696283137.945:1179): pid=3154 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:37.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.15:22-10.200.12.6:55344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:40.161533 kubelet[2491]: E1002 21:45:40.161502 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:45:41.161417 env[1351]: time="2023-10-02T21:45:41.161369688Z" level=info msg="CreateContainer within sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 21:45:41.184374 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount529447944.mount: Deactivated successfully. Oct 2 21:45:41.197053 env[1351]: time="2023-10-02T21:45:41.196996721Z" level=info msg="CreateContainer within sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5\"" Oct 2 21:45:41.197760 env[1351]: time="2023-10-02T21:45:41.197724482Z" level=info msg="StartContainer for \"b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5\"" Oct 2 21:45:41.225362 systemd[1]: Started cri-containerd-b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5.scope. Oct 2 21:45:41.241078 systemd[1]: cri-containerd-b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5.scope: Deactivated successfully. Oct 2 21:45:41.292688 env[1351]: time="2023-10-02T21:45:41.292634408Z" level=info msg="shim disconnected" id=b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5 Oct 2 21:45:41.292688 env[1351]: time="2023-10-02T21:45:41.292685288Z" level=warning msg="cleaning up after shim disconnected" id=b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5 namespace=k8s.io Oct 2 21:45:41.292688 env[1351]: time="2023-10-02T21:45:41.292694928Z" level=info msg="cleaning up dead shim" Oct 2 21:45:41.304631 env[1351]: time="2023-10-02T21:45:41.304570539Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:45:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3191 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:45:41Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:45:41.304881 env[1351]: time="2023-10-02T21:45:41.304824659Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 21:45:41.306305 env[1351]: time="2023-10-02T21:45:41.306270021Z" level=error msg="Failed to pipe stdout of container \"b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5\"" error="reading from a closed fifo" Oct 2 21:45:41.309400 env[1351]: time="2023-10-02T21:45:41.309365223Z" level=error msg="Failed to pipe stderr of container \"b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5\"" error="reading from a closed fifo" Oct 2 21:45:41.313470 env[1351]: time="2023-10-02T21:45:41.313424467Z" level=error msg="StartContainer for \"b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:45:41.313834 kubelet[2491]: E1002 21:45:41.313659 2491 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5" Oct 2 21:45:41.313834 kubelet[2491]: E1002 21:45:41.313776 2491 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:45:41.313834 kubelet[2491]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:45:41.313834 kubelet[2491]: rm /hostbin/cilium-mount Oct 2 21:45:41.314164 kubelet[2491]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-q9hwv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:45:41.314281 kubelet[2491]: E1002 21:45:41.313811 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:45:41.547084 kubelet[2491]: I1002 21:45:41.545277 2491 scope.go:115] "RemoveContainer" containerID="07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56" Oct 2 21:45:41.547084 kubelet[2491]: I1002 21:45:41.545628 2491 scope.go:115] "RemoveContainer" containerID="07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56" Oct 2 21:45:41.555766 env[1351]: time="2023-10-02T21:45:41.555720928Z" level=info msg="RemoveContainer for \"07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56\"" Oct 2 21:45:41.558705 env[1351]: time="2023-10-02T21:45:41.558670931Z" level=info msg="RemoveContainer for \"07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56\"" Oct 2 21:45:41.559010 env[1351]: time="2023-10-02T21:45:41.558976091Z" level=error msg="RemoveContainer for \"07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56\" failed" error="failed to set removing state for container \"07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56\": container is already in removing state" Oct 2 21:45:41.559257 kubelet[2491]: E1002 21:45:41.559232 2491 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56\": container is already in removing state" containerID="07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56" Oct 2 21:45:41.559257 kubelet[2491]: E1002 21:45:41.559268 2491 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56": container is already in removing state; Skipping pod "cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)" Oct 2 21:45:41.560784 kubelet[2491]: E1002 21:45:41.560588 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:45:41.566413 env[1351]: time="2023-10-02T21:45:41.566374858Z" level=info msg="RemoveContainer for \"07e7de37c6d081f8d7de35d61f8d52c7df69778d9b98218fce6202a03d60bd56\" returns successfully" Oct 2 21:45:42.180414 systemd[1]: run-containerd-runc-k8s.io-b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5-runc.pIGaf9.mount: Deactivated successfully. Oct 2 21:45:42.180511 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5-rootfs.mount: Deactivated successfully. Oct 2 21:45:44.397630 kubelet[2491]: W1002 21:45:44.397585 2491 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podcbfbcf26_6e75_44ea_aa34_8d9a81082c88.slice/cri-containerd-b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5.scope WatchSource:0}: task b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5 not found: not found Oct 2 21:45:45.162900 kubelet[2491]: E1002 21:45:45.162874 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:45:48.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.15:22-10.200.12.6:59454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:48.013833 systemd[1]: Started sshd@12-10.200.20.15:22-10.200.12.6:59454.service. Oct 2 21:45:48.019968 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:45:48.020054 kernel: audit: type=1130 audit(1696283148.012:1181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.15:22-10.200.12.6:59454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:48.419000 audit[3209]: USER_ACCT pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:48.421144 sshd[3209]: Accepted publickey for core from 10.200.12.6 port 59454 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:45:48.422922 sshd[3209]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:45:48.421000 audit[3209]: CRED_ACQ pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:48.469154 kernel: audit: type=1101 audit(1696283148.419:1182): pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:48.469313 kernel: audit: type=1103 audit(1696283148.421:1183): pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:48.469529 kernel: audit: type=1006 audit(1696283148.421:1184): pid=3209 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 21:45:48.421000 audit[3209]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff526e5a0 a2=3 a3=1 items=0 ppid=1 pid=3209 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:45:48.487679 systemd[1]: Started session-15.scope. Oct 2 21:45:48.488830 systemd-logind[1339]: New session 15 of user core. Oct 2 21:45:48.509004 kernel: audit: type=1300 audit(1696283148.421:1184): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff526e5a0 a2=3 a3=1 items=0 ppid=1 pid=3209 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:45:48.518343 kernel: audit: type=1327 audit(1696283148.421:1184): proctitle=737368643A20636F7265205B707269765D Oct 2 21:45:48.421000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:45:48.492000 audit[3209]: USER_START pid=3209 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:48.546456 kernel: audit: type=1105 audit(1696283148.492:1185): pid=3209 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:48.495000 audit[3211]: CRED_ACQ pid=3211 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:48.569536 kernel: audit: type=1103 audit(1696283148.495:1186): pid=3211 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:48.803431 sshd[3209]: pam_unix(sshd:session): session closed for user core Oct 2 21:45:48.803000 audit[3209]: USER_END pid=3209 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:48.803000 audit[3209]: CRED_DISP pid=3209 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:48.832353 systemd[1]: sshd@12-10.200.20.15:22-10.200.12.6:59454.service: Deactivated successfully. Oct 2 21:45:48.833102 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 21:45:48.854545 kernel: audit: type=1106 audit(1696283148.803:1187): pid=3209 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:48.854670 kernel: audit: type=1104 audit(1696283148.803:1188): pid=3209 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:48.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.15:22-10.200.12.6:59454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:48.855447 systemd-logind[1339]: Session 15 logged out. Waiting for processes to exit. Oct 2 21:45:48.856276 systemd-logind[1339]: Removed session 15. Oct 2 21:45:50.163981 kubelet[2491]: E1002 21:45:50.163955 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:45:55.164901 kubelet[2491]: E1002 21:45:55.164869 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:45:56.158593 kubelet[2491]: E1002 21:45:56.158562 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:45:58.879658 systemd[1]: Started sshd@13-10.200.20.15:22-10.200.12.6:37556.service. Oct 2 21:45:58.907965 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:45:58.908080 kernel: audit: type=1130 audit(1696283158.878:1190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.15:22-10.200.12.6:37556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:58.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.15:22-10.200.12.6:37556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:45:59.317000 audit[3222]: USER_ACCT pid=3222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:59.319115 sshd[3222]: Accepted publickey for core from 10.200.12.6 port 37556 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:45:59.321315 sshd[3222]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:45:59.319000 audit[3222]: CRED_ACQ pid=3222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:59.365556 kernel: audit: type=1101 audit(1696283159.317:1191): pid=3222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:59.365773 kernel: audit: type=1103 audit(1696283159.319:1192): pid=3222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:59.379747 kernel: audit: type=1006 audit(1696283159.319:1193): pid=3222 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 21:45:59.319000 audit[3222]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7c77c80 a2=3 a3=1 items=0 ppid=1 pid=3222 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:45:59.404294 kernel: audit: type=1300 audit(1696283159.319:1193): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc7c77c80 a2=3 a3=1 items=0 ppid=1 pid=3222 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:45:59.319000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:45:59.413554 kernel: audit: type=1327 audit(1696283159.319:1193): proctitle=737368643A20636F7265205B707269765D Oct 2 21:45:59.415979 systemd-logind[1339]: New session 16 of user core. Oct 2 21:45:59.416466 systemd[1]: Started session-16.scope. Oct 2 21:45:59.419000 audit[3222]: USER_START pid=3222 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:59.446000 audit[3224]: CRED_ACQ pid=3224 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:59.469224 kernel: audit: type=1105 audit(1696283159.419:1194): pid=3222 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:59.469346 kernel: audit: type=1103 audit(1696283159.446:1195): pid=3224 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:59.765432 sshd[3222]: pam_unix(sshd:session): session closed for user core Oct 2 21:45:59.765000 audit[3222]: USER_END pid=3222 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:59.769076 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 21:45:59.769840 systemd[1]: sshd@13-10.200.20.15:22-10.200.12.6:37556.service: Deactivated successfully. Oct 2 21:45:59.766000 audit[3222]: CRED_DISP pid=3222 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:59.814937 kernel: audit: type=1106 audit(1696283159.765:1196): pid=3222 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:59.815038 kernel: audit: type=1104 audit(1696283159.766:1197): pid=3222 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:45:59.793919 systemd-logind[1339]: Session 16 logged out. Waiting for processes to exit. Oct 2 21:45:59.794759 systemd-logind[1339]: Removed session 16. Oct 2 21:45:59.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.15:22-10.200.12.6:37556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:00.166389 kubelet[2491]: E1002 21:46:00.166365 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:46:05.167906 kubelet[2491]: E1002 21:46:05.167877 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:46:09.158160 kubelet[2491]: E1002 21:46:09.158129 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:46:09.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.15:22-10.200.12.6:39938 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:09.833343 systemd[1]: Started sshd@14-10.200.20.15:22-10.200.12.6:39938.service. Oct 2 21:46:09.838550 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:46:09.838623 kernel: audit: type=1130 audit(1696283169.832:1199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.15:22-10.200.12.6:39938 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:10.169239 kubelet[2491]: E1002 21:46:10.169211 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:46:10.228000 audit[3236]: USER_ACCT pid=3236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:10.229896 sshd[3236]: Accepted publickey for core from 10.200.12.6 port 39938 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:46:10.253000 audit[3236]: CRED_ACQ pid=3236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:10.255710 sshd[3236]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:46:10.276766 kernel: audit: type=1101 audit(1696283170.228:1200): pid=3236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:10.276877 kernel: audit: type=1103 audit(1696283170.253:1201): pid=3236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:10.290521 kernel: audit: type=1006 audit(1696283170.254:1202): pid=3236 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 21:46:10.254000 audit[3236]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb574270 a2=3 a3=1 items=0 ppid=1 pid=3236 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:46:10.313895 kernel: audit: type=1300 audit(1696283170.254:1202): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb574270 a2=3 a3=1 items=0 ppid=1 pid=3236 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:46:10.314276 kernel: audit: type=1327 audit(1696283170.254:1202): proctitle=737368643A20636F7265205B707269765D Oct 2 21:46:10.254000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:46:10.323275 systemd-logind[1339]: New session 17 of user core. Oct 2 21:46:10.324054 systemd[1]: Started session-17.scope. Oct 2 21:46:10.327000 audit[3236]: USER_START pid=3236 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:10.354000 audit[3238]: CRED_ACQ pid=3238 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:10.376616 kernel: audit: type=1105 audit(1696283170.327:1203): pid=3236 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:10.376720 kernel: audit: type=1103 audit(1696283170.354:1204): pid=3238 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:10.386000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:46:10.386000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:46:10.409247 kernel: audit: type=1400 audit(1696283170.386:1205): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:46:10.386000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40018a4560 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:46:10.432398 kernel: audit: type=1400 audit(1696283170.386:1206): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:46:10.386000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400157d350 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:46:10.386000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:46:10.386000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:46:10.651383 sshd[3236]: pam_unix(sshd:session): session closed for user core Oct 2 21:46:10.651000 audit[3236]: USER_END pid=3236 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:10.651000 audit[3236]: CRED_DISP pid=3236 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:10.654171 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 21:46:10.653000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.15:22-10.200.12.6:39938 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:10.654847 systemd-logind[1339]: Session 17 logged out. Waiting for processes to exit. Oct 2 21:46:10.654978 systemd[1]: sshd@14-10.200.20.15:22-10.200.12.6:39938.service: Deactivated successfully. Oct 2 21:46:10.656224 systemd-logind[1339]: Removed session 17. Oct 2 21:46:11.594000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:46:11.594000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400eabf140 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:46:11.594000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:46:11.617000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:46:11.617000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:46:11.617000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400c036a40 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:46:11.617000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:46:11.617000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400eba91d0 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:46:11.617000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:46:11.645000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:46:11.645000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400c036b40 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:46:11.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:46:11.645000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:46:11.645000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400eba9200 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:46:11.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:46:11.645000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:46:11.645000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400eba9260 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:46:11.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:46:14.024000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:46:14.024000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40018a5700 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:46:14.024000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:46:14.025000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:46:14.025000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=400171d980 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:46:14.025000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:46:14.025000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:46:14.025000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400171de40 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:46:14.025000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:46:14.025000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:46:14.025000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400171de60 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:46:14.025000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:46:15.170005 kubelet[2491]: E1002 21:46:15.169981 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:46:20.171162 kubelet[2491]: E1002 21:46:20.171126 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:46:20.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.15:22-10.200.12.6:43614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:20.721335 systemd[1]: Started sshd@15-10.200.20.15:22-10.200.12.6:43614.service. Oct 2 21:46:20.726470 kernel: kauditd_printk_skb: 37 callbacks suppressed Oct 2 21:46:20.726596 kernel: audit: type=1130 audit(1696283180.720:1220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.15:22-10.200.12.6:43614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:21.124000 audit[3251]: USER_ACCT pid=3251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:21.126069 sshd[3251]: Accepted publickey for core from 10.200.12.6 port 43614 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:46:21.150862 sshd[3251]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:46:21.151312 kernel: audit: type=1101 audit(1696283181.124:1221): pid=3251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:21.151370 kernel: audit: type=1103 audit(1696283181.149:1222): pid=3251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:21.149000 audit[3251]: CRED_ACQ pid=3251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:21.187422 kernel: audit: type=1006 audit(1696283181.149:1223): pid=3251 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 21:46:21.149000 audit[3251]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4b4ec90 a2=3 a3=1 items=0 ppid=1 pid=3251 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:46:21.210875 kernel: audit: type=1300 audit(1696283181.149:1223): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4b4ec90 a2=3 a3=1 items=0 ppid=1 pid=3251 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:46:21.149000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:46:21.214323 systemd[1]: Started session-18.scope. Oct 2 21:46:21.215017 systemd-logind[1339]: New session 18 of user core. Oct 2 21:46:21.220125 kernel: audit: type=1327 audit(1696283181.149:1223): proctitle=737368643A20636F7265205B707269765D Oct 2 21:46:21.219000 audit[3251]: USER_START pid=3251 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:21.246654 kernel: audit: type=1105 audit(1696283181.219:1224): pid=3251 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:21.246000 audit[3253]: CRED_ACQ pid=3253 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:21.270252 kernel: audit: type=1103 audit(1696283181.246:1225): pid=3253 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:21.550010 sshd[3251]: pam_unix(sshd:session): session closed for user core Oct 2 21:46:21.550000 audit[3251]: USER_END pid=3251 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:21.554128 systemd-logind[1339]: Session 18 logged out. Waiting for processes to exit. Oct 2 21:46:21.555517 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 21:46:21.556718 systemd-logind[1339]: Removed session 18. Oct 2 21:46:21.557482 systemd[1]: sshd@15-10.200.20.15:22-10.200.12.6:43614.service: Deactivated successfully. Oct 2 21:46:21.550000 audit[3251]: CRED_DISP pid=3251 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:21.599362 kernel: audit: type=1106 audit(1696283181.550:1226): pid=3251 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:21.599475 kernel: audit: type=1104 audit(1696283181.550:1227): pid=3251 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:21.556000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.15:22-10.200.12.6:43614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:24.157996 kubelet[2491]: E1002 21:46:24.157956 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:46:25.172065 kubelet[2491]: E1002 21:46:25.172033 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:46:30.173064 kubelet[2491]: E1002 21:46:30.173039 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:46:31.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.15:22-10.200.12.6:33330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:31.617891 systemd[1]: Started sshd@16-10.200.20.15:22-10.200.12.6:33330.service. Oct 2 21:46:31.623053 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:46:31.623157 kernel: audit: type=1130 audit(1696283191.616:1229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.15:22-10.200.12.6:33330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:32.017000 audit[3266]: USER_ACCT pid=3266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:32.019600 sshd[3266]: Accepted publickey for core from 10.200.12.6 port 33330 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:46:32.044789 kernel: audit: type=1101 audit(1696283192.017:1230): pid=3266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:32.044606 sshd[3266]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:46:32.043000 audit[3266]: CRED_ACQ pid=3266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:32.083844 kernel: audit: type=1103 audit(1696283192.043:1231): pid=3266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:32.083966 kernel: audit: type=1006 audit(1696283192.043:1232): pid=3266 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 21:46:32.043000 audit[3266]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc71bb9a0 a2=3 a3=1 items=0 ppid=1 pid=3266 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:46:32.109025 kernel: audit: type=1300 audit(1696283192.043:1232): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc71bb9a0 a2=3 a3=1 items=0 ppid=1 pid=3266 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:46:32.043000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:46:32.112684 systemd-logind[1339]: New session 19 of user core. Oct 2 21:46:32.113250 systemd[1]: Started session-19.scope. Oct 2 21:46:32.118321 kernel: audit: type=1327 audit(1696283192.043:1232): proctitle=737368643A20636F7265205B707269765D Oct 2 21:46:32.117000 audit[3266]: USER_START pid=3266 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:32.145936 kernel: audit: type=1105 audit(1696283192.117:1233): pid=3266 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:32.147581 kernel: audit: type=1103 audit(1696283192.145:1234): pid=3268 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:32.145000 audit[3268]: CRED_ACQ pid=3268 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:32.451414 sshd[3266]: pam_unix(sshd:session): session closed for user core Oct 2 21:46:32.451000 audit[3266]: USER_END pid=3266 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:32.455474 systemd-logind[1339]: Session 19 logged out. Waiting for processes to exit. Oct 2 21:46:32.456724 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 21:46:32.457805 systemd-logind[1339]: Removed session 19. Oct 2 21:46:32.458453 systemd[1]: sshd@16-10.200.20.15:22-10.200.12.6:33330.service: Deactivated successfully. Oct 2 21:46:32.452000 audit[3266]: CRED_DISP pid=3266 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:32.499082 kernel: audit: type=1106 audit(1696283192.451:1235): pid=3266 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:32.499228 kernel: audit: type=1104 audit(1696283192.452:1236): pid=3266 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:32.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.15:22-10.200.12.6:33330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:32.526521 systemd[1]: Started sshd@17-10.200.20.15:22-10.200.12.6:33332.service. Oct 2 21:46:32.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.15:22-10.200.12.6:33332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:32.964000 audit[3279]: USER_ACCT pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:32.966391 sshd[3279]: Accepted publickey for core from 10.200.12.6 port 33332 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:46:32.966000 audit[3279]: CRED_ACQ pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:32.966000 audit[3279]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed214980 a2=3 a3=1 items=0 ppid=1 pid=3279 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:46:32.966000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:46:32.968236 sshd[3279]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:46:32.971977 systemd-logind[1339]: New session 20 of user core. Oct 2 21:46:32.972698 systemd[1]: Started session-20.scope. Oct 2 21:46:32.976000 audit[3279]: USER_START pid=3279 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:32.978000 audit[3281]: CRED_ACQ pid=3281 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:34.074538 sshd[3279]: pam_unix(sshd:session): session closed for user core Oct 2 21:46:34.074000 audit[3279]: USER_END pid=3279 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:34.074000 audit[3279]: CRED_DISP pid=3279 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:34.077484 systemd[1]: sshd@17-10.200.20.15:22-10.200.12.6:33332.service: Deactivated successfully. Oct 2 21:46:34.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.15:22-10.200.12.6:33332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:34.078241 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 21:46:34.078847 systemd-logind[1339]: Session 20 logged out. Waiting for processes to exit. Oct 2 21:46:34.079856 systemd-logind[1339]: Removed session 20. Oct 2 21:46:34.146405 systemd[1]: Started sshd@18-10.200.20.15:22-10.200.12.6:33344.service. Oct 2 21:46:34.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.15:22-10.200.12.6:33344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:34.578000 audit[3290]: USER_ACCT pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:34.579823 sshd[3290]: Accepted publickey for core from 10.200.12.6 port 33344 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:46:34.579000 audit[3290]: CRED_ACQ pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:34.580000 audit[3290]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe21462e0 a2=3 a3=1 items=0 ppid=1 pid=3290 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:46:34.580000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:46:34.581794 sshd[3290]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:46:34.585909 systemd-logind[1339]: New session 21 of user core. Oct 2 21:46:34.586464 systemd[1]: Started session-21.scope. Oct 2 21:46:34.590000 audit[3290]: USER_START pid=3290 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:34.592000 audit[3292]: CRED_ACQ pid=3292 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:34.962371 sshd[3290]: pam_unix(sshd:session): session closed for user core Oct 2 21:46:34.962000 audit[3290]: USER_END pid=3290 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:34.962000 audit[3290]: CRED_DISP pid=3290 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:34.965361 systemd-logind[1339]: Session 21 logged out. Waiting for processes to exit. Oct 2 21:46:34.965449 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 21:46:34.966434 systemd[1]: sshd@18-10.200.20.15:22-10.200.12.6:33344.service: Deactivated successfully. Oct 2 21:46:34.965000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.15:22-10.200.12.6:33344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:34.967464 systemd-logind[1339]: Removed session 21. Oct 2 21:46:35.158547 kubelet[2491]: E1002 21:46:35.158332 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:46:35.174337 kubelet[2491]: E1002 21:46:35.174310 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:46:40.175414 kubelet[2491]: E1002 21:46:40.175380 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:46:45.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.15:22-10.200.12.6:33354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:45.030864 systemd[1]: Started sshd@19-10.200.20.15:22-10.200.12.6:33354.service. Oct 2 21:46:45.036265 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 21:46:45.036392 kernel: audit: type=1130 audit(1696283205.029:1256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.15:22-10.200.12.6:33354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:45.176422 kubelet[2491]: E1002 21:46:45.176385 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:46:45.426000 audit[3303]: USER_ACCT pid=3303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:45.428266 sshd[3303]: Accepted publickey for core from 10.200.12.6 port 33354 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:46:45.454298 kernel: audit: type=1101 audit(1696283205.426:1257): pid=3303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:45.454419 kernel: audit: type=1103 audit(1696283205.452:1258): pid=3303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:45.452000 audit[3303]: CRED_ACQ pid=3303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:45.454808 sshd[3303]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:46:45.491455 kernel: audit: type=1006 audit(1696283205.452:1259): pid=3303 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 21:46:45.452000 audit[3303]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc3bbeaf0 a2=3 a3=1 items=0 ppid=1 pid=3303 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:46:45.516120 kernel: audit: type=1300 audit(1696283205.452:1259): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc3bbeaf0 a2=3 a3=1 items=0 ppid=1 pid=3303 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:46:45.452000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:46:45.519568 systemd[1]: Started session-22.scope. Oct 2 21:46:45.520587 systemd-logind[1339]: New session 22 of user core. Oct 2 21:46:45.525601 kernel: audit: type=1327 audit(1696283205.452:1259): proctitle=737368643A20636F7265205B707269765D Oct 2 21:46:45.525000 audit[3303]: USER_START pid=3303 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:45.552000 audit[3305]: CRED_ACQ pid=3305 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:45.576708 kernel: audit: type=1105 audit(1696283205.525:1260): pid=3303 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:45.576812 kernel: audit: type=1103 audit(1696283205.552:1261): pid=3305 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:45.861773 sshd[3303]: pam_unix(sshd:session): session closed for user core Oct 2 21:46:45.862000 audit[3303]: USER_END pid=3303 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:45.866157 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 21:46:45.867054 systemd[1]: sshd@19-10.200.20.15:22-10.200.12.6:33354.service: Deactivated successfully. Oct 2 21:46:45.891601 systemd-logind[1339]: Session 22 logged out. Waiting for processes to exit. Oct 2 21:46:45.892365 systemd-logind[1339]: Removed session 22. Oct 2 21:46:45.863000 audit[3303]: CRED_DISP pid=3303 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:45.915049 kernel: audit: type=1106 audit(1696283205.862:1262): pid=3303 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:45.915171 kernel: audit: type=1104 audit(1696283205.863:1263): pid=3303 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:45.866000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.15:22-10.200.12.6:33354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:50.157772 kubelet[2491]: E1002 21:46:50.157743 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:46:50.177010 kubelet[2491]: E1002 21:46:50.176981 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:46:55.178386 kubelet[2491]: E1002 21:46:55.178286 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:46:55.929394 systemd[1]: Started sshd@20-10.200.20.15:22-10.200.12.6:57484.service. Oct 2 21:46:55.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.15:22-10.200.12.6:57484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:55.935461 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:46:55.935585 kernel: audit: type=1130 audit(1696283215.928:1265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.15:22-10.200.12.6:57484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:56.324000 audit[3315]: USER_ACCT pid=3315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:56.326396 sshd[3315]: Accepted publickey for core from 10.200.12.6 port 57484 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:46:56.328615 sshd[3315]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:46:56.327000 audit[3315]: CRED_ACQ pid=3315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:56.374056 kernel: audit: type=1101 audit(1696283216.324:1266): pid=3315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:56.374142 kernel: audit: type=1103 audit(1696283216.327:1267): pid=3315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:56.389286 kernel: audit: type=1006 audit(1696283216.327:1268): pid=3315 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 21:46:56.327000 audit[3315]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff587afc0 a2=3 a3=1 items=0 ppid=1 pid=3315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:46:56.413842 kernel: audit: type=1300 audit(1696283216.327:1268): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff587afc0 a2=3 a3=1 items=0 ppid=1 pid=3315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:46:56.327000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:46:56.424100 kernel: audit: type=1327 audit(1696283216.327:1268): proctitle=737368643A20636F7265205B707269765D Oct 2 21:46:56.424885 systemd-logind[1339]: New session 23 of user core. Oct 2 21:46:56.425512 systemd[1]: Started session-23.scope. Oct 2 21:46:56.428000 audit[3315]: USER_START pid=3315 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:56.459569 kernel: audit: type=1105 audit(1696283216.428:1269): pid=3315 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:56.457000 audit[3317]: CRED_ACQ pid=3317 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:56.483251 kernel: audit: type=1103 audit(1696283216.457:1270): pid=3317 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:56.762407 sshd[3315]: pam_unix(sshd:session): session closed for user core Oct 2 21:46:56.762000 audit[3315]: USER_END pid=3315 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:56.766974 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 21:46:56.767705 systemd[1]: sshd@20-10.200.20.15:22-10.200.12.6:57484.service: Deactivated successfully. Oct 2 21:46:56.764000 audit[3315]: CRED_DISP pid=3315 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:56.813060 kernel: audit: type=1106 audit(1696283216.762:1271): pid=3315 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:56.813197 kernel: audit: type=1104 audit(1696283216.764:1272): pid=3315 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:46:56.813334 systemd-logind[1339]: Session 23 logged out. Waiting for processes to exit. Oct 2 21:46:56.766000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.15:22-10.200.12.6:57484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:46:56.814789 systemd-logind[1339]: Removed session 23. Oct 2 21:47:00.179226 kubelet[2491]: E1002 21:47:00.179196 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:47:05.158681 kubelet[2491]: E1002 21:47:05.158647 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:47:05.180395 kubelet[2491]: E1002 21:47:05.180372 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:47:06.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.15:22-10.200.12.6:36928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:47:06.831526 systemd[1]: Started sshd@21-10.200.20.15:22-10.200.12.6:36928.service. Oct 2 21:47:06.836829 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:47:06.836877 kernel: audit: type=1130 audit(1696283226.830:1274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.15:22-10.200.12.6:36928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:47:07.231000 audit[3328]: USER_ACCT pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:07.232979 sshd[3328]: Accepted publickey for core from 10.200.12.6 port 36928 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:47:07.235865 sshd[3328]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:47:07.234000 audit[3328]: CRED_ACQ pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:07.278281 kernel: audit: type=1101 audit(1696283227.231:1275): pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:07.278397 kernel: audit: type=1103 audit(1696283227.234:1276): pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:07.292012 kernel: audit: type=1006 audit(1696283227.234:1277): pid=3328 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 21:47:07.234000 audit[3328]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0e6a500 a2=3 a3=1 items=0 ppid=1 pid=3328 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:47:07.315901 kernel: audit: type=1300 audit(1696283227.234:1277): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0e6a500 a2=3 a3=1 items=0 ppid=1 pid=3328 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:47:07.234000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:47:07.324137 kernel: audit: type=1327 audit(1696283227.234:1277): proctitle=737368643A20636F7265205B707269765D Oct 2 21:47:07.324772 systemd-logind[1339]: New session 24 of user core. Oct 2 21:47:07.325695 systemd[1]: Started session-24.scope. Oct 2 21:47:07.333000 audit[3328]: USER_START pid=3328 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:07.360000 audit[3330]: CRED_ACQ pid=3330 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:07.386050 kernel: audit: type=1105 audit(1696283227.333:1278): pid=3328 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:07.386159 kernel: audit: type=1103 audit(1696283227.360:1279): pid=3330 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:07.665785 sshd[3328]: pam_unix(sshd:session): session closed for user core Oct 2 21:47:07.665000 audit[3328]: USER_END pid=3328 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:07.669351 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 21:47:07.670098 systemd[1]: sshd@21-10.200.20.15:22-10.200.12.6:36928.service: Deactivated successfully. Oct 2 21:47:07.666000 audit[3328]: CRED_DISP pid=3328 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:07.715329 kernel: audit: type=1106 audit(1696283227.665:1280): pid=3328 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:07.715479 kernel: audit: type=1104 audit(1696283227.666:1281): pid=3328 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:07.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.15:22-10.200.12.6:36928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:47:07.715651 systemd-logind[1339]: Session 24 logged out. Waiting for processes to exit. Oct 2 21:47:07.716475 systemd-logind[1339]: Removed session 24. Oct 2 21:47:10.181445 kubelet[2491]: E1002 21:47:10.181409 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:47:10.386000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:10.386000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:10.386000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002619170 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:47:10.386000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:47:10.386000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40028b8f40 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:47:10.386000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:47:11.595000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:11.595000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400e82f5c0 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:47:11.595000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:47:11.618000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:11.618000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:11.618000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4003e511c0 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:47:11.618000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:47:11.618000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400e82f5f0 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:47:11.618000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:47:11.646000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:11.646000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:11.646000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=4003e51280 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:47:11.646000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:47:11.646000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400e82f6e0 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:47:11.646000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:47:11.646000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:11.646000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400e82f740 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:47:11.646000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:47:14.025000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:14.031403 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 21:47:14.031478 kernel: audit: type=1400 audit(1696283234.025:1291): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:14.025000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002803440 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:47:14.081120 kernel: audit: type=1300 audit(1696283234.025:1291): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002803440 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:47:14.025000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:47:14.105422 kernel: audit: type=1327 audit(1696283234.025:1291): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:47:14.105519 kernel: audit: type=1400 audit(1696283234.030:1292): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:14.030000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:14.030000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028b9340 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:47:14.154602 kernel: audit: type=1300 audit(1696283234.030:1292): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028b9340 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:47:14.030000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:47:14.178200 kernel: audit: type=1327 audit(1696283234.030:1292): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:47:14.178311 kernel: audit: type=1400 audit(1696283234.030:1293): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:14.030000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:14.030000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028b9360 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:47:14.228186 kernel: audit: type=1300 audit(1696283234.030:1293): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40028b9360 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:47:14.030000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:47:14.252163 kernel: audit: type=1327 audit(1696283234.030:1293): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:47:14.252298 kernel: audit: type=1400 audit(1696283234.030:1294): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:14.030000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:47:14.030000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002803660 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:47:14.030000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:47:15.109746 kubelet[2491]: W1002 21:47:15.109703 2491 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 21:47:15.182752 kubelet[2491]: E1002 21:47:15.182729 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:47:17.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.15:22-10.200.12.6:32988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:47:17.732916 systemd[1]: Started sshd@22-10.200.20.15:22-10.200.12.6:32988.service. Oct 2 21:47:18.127000 audit[3341]: USER_ACCT pid=3341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:18.128685 sshd[3341]: Accepted publickey for core from 10.200.12.6 port 32988 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:47:18.128000 audit[3341]: CRED_ACQ pid=3341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:18.128000 audit[3341]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcb8b2820 a2=3 a3=1 items=0 ppid=1 pid=3341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:47:18.128000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:47:18.130603 sshd[3341]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:47:18.134703 systemd-logind[1339]: New session 25 of user core. Oct 2 21:47:18.135159 systemd[1]: Started session-25.scope. Oct 2 21:47:18.138000 audit[3341]: USER_START pid=3341 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:18.141000 audit[3343]: CRED_ACQ pid=3343 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:18.488165 sshd[3341]: pam_unix(sshd:session): session closed for user core Oct 2 21:47:18.488000 audit[3341]: USER_END pid=3341 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:18.488000 audit[3341]: CRED_DISP pid=3341 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:18.491296 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 21:47:18.491000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.15:22-10.200.12.6:32988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:47:18.491978 systemd-logind[1339]: Session 25 logged out. Waiting for processes to exit. Oct 2 21:47:18.492079 systemd[1]: sshd@22-10.200.20.15:22-10.200.12.6:32988.service: Deactivated successfully. Oct 2 21:47:18.493232 systemd-logind[1339]: Removed session 25. Oct 2 21:47:19.158065 kubelet[2491]: E1002 21:47:19.158033 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:47:20.183895 kubelet[2491]: E1002 21:47:20.183791 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:47:25.185366 kubelet[2491]: E1002 21:47:25.185322 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:47:28.583808 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 21:47:28.584000 kernel: audit: type=1130 audit(1696283248.555:1304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.15:22-10.200.12.6:57444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:47:28.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.15:22-10.200.12.6:57444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:47:28.556308 systemd[1]: Started sshd@23-10.200.20.15:22-10.200.12.6:57444.service. Oct 2 21:47:28.949000 audit[3352]: USER_ACCT pid=3352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:28.950758 sshd[3352]: Accepted publickey for core from 10.200.12.6 port 57444 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:47:28.953334 sshd[3352]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:47:28.974950 kernel: audit: type=1101 audit(1696283248.949:1305): pid=3352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:28.975120 kernel: audit: type=1103 audit(1696283248.951:1306): pid=3352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:28.951000 audit[3352]: CRED_ACQ pid=3352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:29.001206 systemd[1]: Started session-26.scope. Oct 2 21:47:29.011974 kernel: audit: type=1006 audit(1696283248.951:1307): pid=3352 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 21:47:29.012025 systemd-logind[1339]: New session 26 of user core. Oct 2 21:47:28.951000 audit[3352]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc58f340 a2=3 a3=1 items=0 ppid=1 pid=3352 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:47:29.036098 kernel: audit: type=1300 audit(1696283248.951:1307): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffc58f340 a2=3 a3=1 items=0 ppid=1 pid=3352 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:47:28.951000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:47:29.044809 kernel: audit: type=1327 audit(1696283248.951:1307): proctitle=737368643A20636F7265205B707269765D Oct 2 21:47:29.047000 audit[3352]: USER_START pid=3352 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:29.051000 audit[3354]: CRED_ACQ pid=3354 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:29.098551 kernel: audit: type=1105 audit(1696283249.047:1308): pid=3352 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:29.098692 kernel: audit: type=1103 audit(1696283249.051:1309): pid=3354 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:29.354438 sshd[3352]: pam_unix(sshd:session): session closed for user core Oct 2 21:47:29.354000 audit[3352]: USER_END pid=3352 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:29.357672 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 21:47:29.358521 systemd[1]: sshd@23-10.200.20.15:22-10.200.12.6:57444.service: Deactivated successfully. Oct 2 21:47:29.355000 audit[3352]: CRED_DISP pid=3352 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:29.403927 kernel: audit: type=1106 audit(1696283249.354:1310): pid=3352 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:29.404023 kernel: audit: type=1104 audit(1696283249.355:1311): pid=3352 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:29.404312 systemd-logind[1339]: Session 26 logged out. Waiting for processes to exit. Oct 2 21:47:29.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.15:22-10.200.12.6:57444 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:47:29.405047 systemd-logind[1339]: Removed session 26. Oct 2 21:47:30.157714 kubelet[2491]: E1002 21:47:30.157676 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:47:30.186111 kubelet[2491]: E1002 21:47:30.186088 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:47:35.187360 kubelet[2491]: E1002 21:47:35.187329 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:47:39.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.15:22-10.200.12.6:57476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:47:39.428400 systemd[1]: Started sshd@24-10.200.20.15:22-10.200.12.6:57476.service. Oct 2 21:47:39.434204 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:47:39.434327 kernel: audit: type=1130 audit(1696283259.427:1313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.15:22-10.200.12.6:57476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:47:39.862086 sshd[3365]: Accepted publickey for core from 10.200.12.6 port 57476 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:47:39.860000 audit[3365]: USER_ACCT pid=3365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:39.884000 audit[3365]: CRED_ACQ pid=3365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:39.886021 sshd[3365]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:47:39.907961 kernel: audit: type=1101 audit(1696283259.860:1314): pid=3365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:39.908073 kernel: audit: type=1103 audit(1696283259.884:1315): pid=3365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:39.921729 kernel: audit: type=1006 audit(1696283259.884:1316): pid=3365 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 21:47:39.884000 audit[3365]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4242bd0 a2=3 a3=1 items=0 ppid=1 pid=3365 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:47:39.945810 kernel: audit: type=1300 audit(1696283259.884:1316): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4242bd0 a2=3 a3=1 items=0 ppid=1 pid=3365 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:47:39.884000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:47:39.954106 kernel: audit: type=1327 audit(1696283259.884:1316): proctitle=737368643A20636F7265205B707269765D Oct 2 21:47:39.957246 systemd[1]: Started session-27.scope. Oct 2 21:47:39.957709 systemd-logind[1339]: New session 27 of user core. Oct 2 21:47:39.960000 audit[3365]: USER_START pid=3365 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:39.963000 audit[3367]: CRED_ACQ pid=3367 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:40.008562 kernel: audit: type=1105 audit(1696283259.960:1317): pid=3365 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:40.008638 kernel: audit: type=1103 audit(1696283259.963:1318): pid=3367 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:40.188566 kubelet[2491]: E1002 21:47:40.188473 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:47:40.283476 sshd[3365]: pam_unix(sshd:session): session closed for user core Oct 2 21:47:40.284000 audit[3365]: USER_END pid=3365 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:40.287454 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 21:47:40.288060 systemd[1]: sshd@24-10.200.20.15:22-10.200.12.6:57476.service: Deactivated successfully. Oct 2 21:47:40.284000 audit[3365]: CRED_DISP pid=3365 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:40.311478 systemd-logind[1339]: Session 27 logged out. Waiting for processes to exit. Oct 2 21:47:40.312395 systemd-logind[1339]: Removed session 27. Oct 2 21:47:40.332293 kernel: audit: type=1106 audit(1696283260.284:1319): pid=3365 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:40.332434 kernel: audit: type=1104 audit(1696283260.284:1320): pid=3365 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:40.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.15:22-10.200.12.6:57476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:47:41.159926 kubelet[2491]: E1002 21:47:41.159893 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:47:45.189928 kubelet[2491]: E1002 21:47:45.189904 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:47:50.191450 kubelet[2491]: E1002 21:47:50.191419 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:47:50.351477 systemd[1]: Started sshd@25-10.200.20.15:22-10.200.12.6:36618.service. Oct 2 21:47:50.378641 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:47:50.378811 kernel: audit: type=1130 audit(1696283270.350:1322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.15:22-10.200.12.6:36618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:47:50.350000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.15:22-10.200.12.6:36618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:47:50.744000 audit[3377]: USER_ACCT pid=3377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:50.747203 sshd[3377]: Accepted publickey for core from 10.200.12.6 port 36618 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:47:50.747960 sshd[3377]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:47:50.744000 audit[3377]: CRED_ACQ pid=3377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:50.773979 systemd[1]: Started session-28.scope. Oct 2 21:47:50.775230 systemd-logind[1339]: New session 28 of user core. Oct 2 21:47:50.791960 kernel: audit: type=1101 audit(1696283270.744:1323): pid=3377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:50.792082 kernel: audit: type=1103 audit(1696283270.744:1324): pid=3377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:50.806952 kernel: audit: type=1006 audit(1696283270.744:1325): pid=3377 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 21:47:50.744000 audit[3377]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6b1ca60 a2=3 a3=1 items=0 ppid=1 pid=3377 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:47:50.830697 kernel: audit: type=1300 audit(1696283270.744:1325): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6b1ca60 a2=3 a3=1 items=0 ppid=1 pid=3377 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:47:50.830976 kernel: audit: type=1327 audit(1696283270.744:1325): proctitle=737368643A20636F7265205B707269765D Oct 2 21:47:50.744000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:47:50.791000 audit[3377]: USER_START pid=3377 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:50.864820 kernel: audit: type=1105 audit(1696283270.791:1326): pid=3377 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:50.791000 audit[3379]: CRED_ACQ pid=3379 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:50.887746 kernel: audit: type=1103 audit(1696283270.791:1327): pid=3379 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:51.108281 sshd[3377]: pam_unix(sshd:session): session closed for user core Oct 2 21:47:51.108000 audit[3377]: USER_END pid=3377 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:51.113019 systemd-logind[1339]: Session 28 logged out. Waiting for processes to exit. Oct 2 21:47:51.114311 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 21:47:51.115574 systemd-logind[1339]: Removed session 28. Oct 2 21:47:51.116221 systemd[1]: sshd@25-10.200.20.15:22-10.200.12.6:36618.service: Deactivated successfully. Oct 2 21:47:51.108000 audit[3377]: CRED_DISP pid=3377 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:51.156273 kernel: audit: type=1106 audit(1696283271.108:1328): pid=3377 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:51.156443 kernel: audit: type=1104 audit(1696283271.108:1329): pid=3377 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:47:51.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.15:22-10.200.12.6:36618 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:47:54.158330 kubelet[2491]: E1002 21:47:54.158288 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:47:55.192980 kubelet[2491]: E1002 21:47:55.192955 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:48:00.194865 kubelet[2491]: E1002 21:48:00.194840 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:48:01.182740 systemd[1]: Started sshd@26-10.200.20.15:22-10.200.12.6:48536.service. Oct 2 21:48:01.210644 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:48:01.210740 kernel: audit: type=1130 audit(1696283281.181:1331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.15:22-10.200.12.6:48536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:48:01.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.15:22-10.200.12.6:48536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:48:01.619000 audit[3391]: USER_ACCT pid=3391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:01.623360 sshd[3391]: Accepted publickey for core from 10.200.12.6 port 48536 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:48:01.627346 sshd[3391]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:48:01.625000 audit[3391]: CRED_ACQ pid=3391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:01.668392 kernel: audit: type=1101 audit(1696283281.619:1332): pid=3391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:01.668554 kernel: audit: type=1103 audit(1696283281.625:1333): pid=3391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:01.668594 kernel: audit: type=1006 audit(1696283281.625:1334): pid=3391 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 21:48:01.625000 audit[3391]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdbb075b0 a2=3 a3=1 items=0 ppid=1 pid=3391 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:48:01.708426 kernel: audit: type=1300 audit(1696283281.625:1334): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdbb075b0 a2=3 a3=1 items=0 ppid=1 pid=3391 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:48:01.625000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:48:01.717985 kernel: audit: type=1327 audit(1696283281.625:1334): proctitle=737368643A20636F7265205B707269765D Oct 2 21:48:01.720506 systemd[1]: Started session-29.scope. Oct 2 21:48:01.720655 systemd-logind[1339]: New session 29 of user core. Oct 2 21:48:01.724000 audit[3391]: USER_START pid=3391 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:01.754245 kernel: audit: type=1105 audit(1696283281.724:1335): pid=3391 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:01.754379 kernel: audit: type=1103 audit(1696283281.727:1336): pid=3393 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:01.727000 audit[3393]: CRED_ACQ pid=3393 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:02.055676 sshd[3391]: pam_unix(sshd:session): session closed for user core Oct 2 21:48:02.056000 audit[3391]: USER_END pid=3391 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:02.059895 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 21:48:02.060654 systemd[1]: sshd@26-10.200.20.15:22-10.200.12.6:48536.service: Deactivated successfully. Oct 2 21:48:02.056000 audit[3391]: CRED_DISP pid=3391 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:02.107168 kernel: audit: type=1106 audit(1696283282.056:1337): pid=3391 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:02.107273 kernel: audit: type=1104 audit(1696283282.056:1338): pid=3391 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:02.056000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.15:22-10.200.12.6:48536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:48:02.107471 systemd-logind[1339]: Session 29 logged out. Waiting for processes to exit. Oct 2 21:48:02.108300 systemd-logind[1339]: Removed session 29. Oct 2 21:48:05.196035 kubelet[2491]: E1002 21:48:05.196008 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:48:07.158896 kubelet[2491]: E1002 21:48:07.158865 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k9nq4_kube-system(cbfbcf26-6e75-44ea-aa34-8d9a81082c88)\"" pod="kube-system/cilium-k9nq4" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 Oct 2 21:48:10.197655 kubelet[2491]: E1002 21:48:10.197590 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:48:10.387000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:10.393619 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 21:48:10.393740 kernel: audit: type=1400 audit(1696283290.387:1340): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:10.387000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000b2e600 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:48:10.444341 kernel: audit: type=1300 audit(1696283290.387:1340): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000b2e600 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:48:10.387000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:48:10.468437 kernel: audit: type=1327 audit(1696283290.387:1340): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:48:10.468614 kernel: audit: type=1400 audit(1696283290.387:1341): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:10.387000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:10.387000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40008bf4d0 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:48:10.521229 kernel: audit: type=1300 audit(1696283290.387:1341): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40008bf4d0 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:48:10.387000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:48:10.545786 kernel: audit: type=1327 audit(1696283290.387:1341): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:48:11.596000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:11.596000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4008eda900 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:48:11.649869 kernel: audit: type=1400 audit(1696283291.596:1342): avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:11.650005 kernel: audit: type=1300 audit(1696283291.596:1342): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4008eda900 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:48:11.596000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:48:11.673606 kernel: audit: type=1327 audit(1696283291.596:1342): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:48:11.673772 kernel: audit: type=1400 audit(1696283291.618:1343): avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:11.618000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:11.618000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4008eda930 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:48:11.618000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:48:11.619000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:11.619000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4003e57f40 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:48:11.619000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:48:11.647000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:11.647000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4003e57f80 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:48:11.647000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:48:11.647000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:11.647000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4008edaa20 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:48:11.647000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:48:11.647000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:11.647000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4008edaa80 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:48:11.647000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:48:12.122555 systemd[1]: Started sshd@27-10.200.20.15:22-10.200.12.6:37344.service. Oct 2 21:48:12.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.15:22-10.200.12.6:37344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:48:12.517000 audit[3402]: USER_ACCT pid=3402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:12.518443 sshd[3402]: Accepted publickey for core from 10.200.12.6 port 37344 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:48:12.518000 audit[3402]: CRED_ACQ pid=3402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:12.518000 audit[3402]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd537ea60 a2=3 a3=1 items=0 ppid=1 pid=3402 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:48:12.518000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:48:12.520657 sshd[3402]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:48:12.525224 systemd[1]: Started session-30.scope. Oct 2 21:48:12.525579 systemd-logind[1339]: New session 30 of user core. Oct 2 21:48:12.528000 audit[3402]: USER_START pid=3402 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:12.531000 audit[3404]: CRED_ACQ pid=3404 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:12.882088 sshd[3402]: pam_unix(sshd:session): session closed for user core Oct 2 21:48:12.882000 audit[3402]: USER_END pid=3402 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:12.882000 audit[3402]: CRED_DISP pid=3402 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:12.885599 systemd-logind[1339]: Session 30 logged out. Waiting for processes to exit. Oct 2 21:48:12.886454 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 21:48:12.887234 systemd[1]: sshd@27-10.200.20.15:22-10.200.12.6:37344.service: Deactivated successfully. Oct 2 21:48:12.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.15:22-10.200.12.6:37344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:48:12.887997 systemd-logind[1339]: Removed session 30. Oct 2 21:48:12.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.15:22-10.200.12.6:37350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:48:12.956072 systemd[1]: Started sshd@28-10.200.20.15:22-10.200.12.6:37350.service. Oct 2 21:48:13.393000 audit[3413]: USER_ACCT pid=3413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:13.394625 sshd[3413]: Accepted publickey for core from 10.200.12.6 port 37350 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:48:13.394000 audit[3413]: CRED_ACQ pid=3413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:13.395000 audit[3413]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9f40440 a2=3 a3=1 items=0 ppid=1 pid=3413 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:48:13.395000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:48:13.396519 sshd[3413]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:48:13.400379 systemd-logind[1339]: New session 31 of user core. Oct 2 21:48:13.400890 systemd[1]: Started session-31.scope. Oct 2 21:48:13.404000 audit[3413]: USER_START pid=3413 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:13.406000 audit[3415]: CRED_ACQ pid=3415 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:14.030000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:14.030000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000b2ec00 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:48:14.030000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:48:14.031000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:14.031000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000b2ed20 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:48:14.031000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:48:14.032000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:14.032000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000b2ee40 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:48:14.032000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:48:14.032000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:48:14.032000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40011bdba0 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:48:14.032000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:48:15.199117 kubelet[2491]: E1002 21:48:15.199085 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:48:16.227992 env[1351]: time="2023-10-02T21:48:16.227931199Z" level=info msg="StopPodSandbox for \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\"" Oct 2 21:48:16.228503 env[1351]: time="2023-10-02T21:48:16.228009839Z" level=info msg="Container to stop \"b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:48:16.229512 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751-shm.mount: Deactivated successfully. Oct 2 21:48:16.243132 systemd[1]: cri-containerd-fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751.scope: Deactivated successfully. Oct 2 21:48:16.255719 kernel: kauditd_printk_skb: 45 callbacks suppressed Oct 2 21:48:16.255846 kernel: audit: type=1334 audit(1696283296.242:1367): prog-id=115 op=UNLOAD Oct 2 21:48:16.242000 audit: BPF prog-id=115 op=UNLOAD Oct 2 21:48:16.257889 env[1351]: time="2023-10-02T21:48:16.257841030Z" level=info msg="StopContainer for \"7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d\" with timeout 30 (s)" Oct 2 21:48:16.258319 env[1351]: time="2023-10-02T21:48:16.258275550Z" level=info msg="Stop container \"7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d\" with signal terminated" Oct 2 21:48:16.258000 audit: BPF prog-id=118 op=UNLOAD Oct 2 21:48:16.268352 kernel: audit: type=1334 audit(1696283296.258:1368): prog-id=118 op=UNLOAD Oct 2 21:48:16.289895 systemd[1]: cri-containerd-7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d.scope: Deactivated successfully. Oct 2 21:48:16.289000 audit: BPF prog-id=122 op=UNLOAD Oct 2 21:48:16.300211 kernel: audit: type=1334 audit(1696283296.289:1369): prog-id=122 op=UNLOAD Oct 2 21:48:16.300000 audit: BPF prog-id=125 op=UNLOAD Oct 2 21:48:16.309208 kernel: audit: type=1334 audit(1696283296.300:1370): prog-id=125 op=UNLOAD Oct 2 21:48:16.311975 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751-rootfs.mount: Deactivated successfully. Oct 2 21:48:16.336304 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d-rootfs.mount: Deactivated successfully. Oct 2 21:48:16.388957 env[1351]: time="2023-10-02T21:48:16.388908712Z" level=info msg="shim disconnected" id=fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751 Oct 2 21:48:16.389426 env[1351]: time="2023-10-02T21:48:16.389405151Z" level=warning msg="cleaning up after shim disconnected" id=fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751 namespace=k8s.io Oct 2 21:48:16.389789 env[1351]: time="2023-10-02T21:48:16.389766631Z" level=info msg="cleaning up dead shim" Oct 2 21:48:16.391934 env[1351]: time="2023-10-02T21:48:16.391893071Z" level=info msg="shim disconnected" id=7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d Oct 2 21:48:16.391934 env[1351]: time="2023-10-02T21:48:16.391932631Z" level=warning msg="cleaning up after shim disconnected" id=7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d namespace=k8s.io Oct 2 21:48:16.392042 env[1351]: time="2023-10-02T21:48:16.391941871Z" level=info msg="cleaning up dead shim" Oct 2 21:48:16.405274 env[1351]: time="2023-10-02T21:48:16.405231987Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:48:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3462 runtime=io.containerd.runc.v2\n" Oct 2 21:48:16.405727 env[1351]: time="2023-10-02T21:48:16.405703267Z" level=info msg="TearDown network for sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" successfully" Oct 2 21:48:16.405854 env[1351]: time="2023-10-02T21:48:16.405835947Z" level=info msg="StopPodSandbox for \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" returns successfully" Oct 2 21:48:16.409511 env[1351]: time="2023-10-02T21:48:16.409465185Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:48:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3463 runtime=io.containerd.runc.v2\n" Oct 2 21:48:16.414048 env[1351]: time="2023-10-02T21:48:16.413796624Z" level=info msg="StopContainer for \"7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d\" returns successfully" Oct 2 21:48:16.414747 env[1351]: time="2023-10-02T21:48:16.414717064Z" level=info msg="StopPodSandbox for \"09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094\"" Oct 2 21:48:16.414793 env[1351]: time="2023-10-02T21:48:16.414772624Z" level=info msg="Container to stop \"7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:48:16.416236 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094-shm.mount: Deactivated successfully. Oct 2 21:48:16.425000 audit: BPF prog-id=111 op=UNLOAD Oct 2 21:48:16.426203 systemd[1]: cri-containerd-09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094.scope: Deactivated successfully. Oct 2 21:48:16.434246 kernel: audit: type=1334 audit(1696283296.425:1371): prog-id=111 op=UNLOAD Oct 2 21:48:16.438000 audit: BPF prog-id=114 op=UNLOAD Oct 2 21:48:16.446225 kernel: audit: type=1334 audit(1696283296.438:1372): prog-id=114 op=UNLOAD Oct 2 21:48:16.460320 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094-rootfs.mount: Deactivated successfully. Oct 2 21:48:16.475318 env[1351]: time="2023-10-02T21:48:16.475271286Z" level=info msg="shim disconnected" id=09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094 Oct 2 21:48:16.475782 env[1351]: time="2023-10-02T21:48:16.475678366Z" level=warning msg="cleaning up after shim disconnected" id=09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094 namespace=k8s.io Oct 2 21:48:16.475885 env[1351]: time="2023-10-02T21:48:16.475866006Z" level=info msg="cleaning up dead shim" Oct 2 21:48:16.491166 env[1351]: time="2023-10-02T21:48:16.490394402Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:48:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3507 runtime=io.containerd.runc.v2\n" Oct 2 21:48:16.491689 env[1351]: time="2023-10-02T21:48:16.491656241Z" level=info msg="TearDown network for sandbox \"09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094\" successfully" Oct 2 21:48:16.491800 env[1351]: time="2023-10-02T21:48:16.491781361Z" level=info msg="StopPodSandbox for \"09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094\" returns successfully" Oct 2 21:48:16.502314 kubelet[2491]: I1002 21:48:16.502277 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-clustermesh-secrets\") pod \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " Oct 2 21:48:16.502314 kubelet[2491]: I1002 21:48:16.502324 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-lib-modules\") pod \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " Oct 2 21:48:16.502715 kubelet[2491]: I1002 21:48:16.502350 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-q9hwv\" (UniqueName: \"kubernetes.io/projected/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-kube-api-access-q9hwv\") pod \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " Oct 2 21:48:16.502715 kubelet[2491]: I1002 21:48:16.502367 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-etc-cni-netd\") pod \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " Oct 2 21:48:16.502715 kubelet[2491]: I1002 21:48:16.502386 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cni-path\") pod \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " Oct 2 21:48:16.502715 kubelet[2491]: I1002 21:48:16.502402 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-bpf-maps\") pod \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " Oct 2 21:48:16.502715 kubelet[2491]: I1002 21:48:16.502419 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-hostproc\") pod \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " Oct 2 21:48:16.502715 kubelet[2491]: I1002 21:48:16.502438 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cilium-config-path\") pod \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " Oct 2 21:48:16.502865 kubelet[2491]: I1002 21:48:16.502456 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cilium-run\") pod \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " Oct 2 21:48:16.502865 kubelet[2491]: I1002 21:48:16.502477 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-hubble-tls\") pod \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " Oct 2 21:48:16.502865 kubelet[2491]: I1002 21:48:16.502495 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-xtables-lock\") pod \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " Oct 2 21:48:16.502865 kubelet[2491]: I1002 21:48:16.502514 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cilium-cgroup\") pod \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " Oct 2 21:48:16.502865 kubelet[2491]: I1002 21:48:16.502533 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-host-proc-sys-kernel\") pod \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " Oct 2 21:48:16.502865 kubelet[2491]: I1002 21:48:16.502564 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-host-proc-sys-net\") pod \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\" (UID: \"cbfbcf26-6e75-44ea-aa34-8d9a81082c88\") " Oct 2 21:48:16.503003 kubelet[2491]: I1002 21:48:16.502622 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "cbfbcf26-6e75-44ea-aa34-8d9a81082c88" (UID: "cbfbcf26-6e75-44ea-aa34-8d9a81082c88"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:48:16.503003 kubelet[2491]: I1002 21:48:16.502916 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-hostproc" (OuterVolumeSpecName: "hostproc") pod "cbfbcf26-6e75-44ea-aa34-8d9a81082c88" (UID: "cbfbcf26-6e75-44ea-aa34-8d9a81082c88"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:48:16.503003 kubelet[2491]: I1002 21:48:16.502941 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "cbfbcf26-6e75-44ea-aa34-8d9a81082c88" (UID: "cbfbcf26-6e75-44ea-aa34-8d9a81082c88"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:48:16.503124 kubelet[2491]: I1002 21:48:16.503087 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "cbfbcf26-6e75-44ea-aa34-8d9a81082c88" (UID: "cbfbcf26-6e75-44ea-aa34-8d9a81082c88"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:48:16.503124 kubelet[2491]: I1002 21:48:16.503120 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cni-path" (OuterVolumeSpecName: "cni-path") pod "cbfbcf26-6e75-44ea-aa34-8d9a81082c88" (UID: "cbfbcf26-6e75-44ea-aa34-8d9a81082c88"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:48:16.503240 kubelet[2491]: I1002 21:48:16.503136 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "cbfbcf26-6e75-44ea-aa34-8d9a81082c88" (UID: "cbfbcf26-6e75-44ea-aa34-8d9a81082c88"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:48:16.503386 kubelet[2491]: W1002 21:48:16.503354 2491 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/cbfbcf26-6e75-44ea-aa34-8d9a81082c88/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 21:48:16.505009 kubelet[2491]: I1002 21:48:16.504978 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "cbfbcf26-6e75-44ea-aa34-8d9a81082c88" (UID: "cbfbcf26-6e75-44ea-aa34-8d9a81082c88"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 21:48:16.505065 kubelet[2491]: I1002 21:48:16.505033 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "cbfbcf26-6e75-44ea-aa34-8d9a81082c88" (UID: "cbfbcf26-6e75-44ea-aa34-8d9a81082c88"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:48:16.505065 kubelet[2491]: I1002 21:48:16.505054 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "cbfbcf26-6e75-44ea-aa34-8d9a81082c88" (UID: "cbfbcf26-6e75-44ea-aa34-8d9a81082c88"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:48:16.505122 kubelet[2491]: I1002 21:48:16.505071 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "cbfbcf26-6e75-44ea-aa34-8d9a81082c88" (UID: "cbfbcf26-6e75-44ea-aa34-8d9a81082c88"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:48:16.505122 kubelet[2491]: I1002 21:48:16.505087 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "cbfbcf26-6e75-44ea-aa34-8d9a81082c88" (UID: "cbfbcf26-6e75-44ea-aa34-8d9a81082c88"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:48:16.509549 kubelet[2491]: I1002 21:48:16.509489 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "cbfbcf26-6e75-44ea-aa34-8d9a81082c88" (UID: "cbfbcf26-6e75-44ea-aa34-8d9a81082c88"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 21:48:16.510268 kubelet[2491]: I1002 21:48:16.510244 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-kube-api-access-q9hwv" (OuterVolumeSpecName: "kube-api-access-q9hwv") pod "cbfbcf26-6e75-44ea-aa34-8d9a81082c88" (UID: "cbfbcf26-6e75-44ea-aa34-8d9a81082c88"). InnerVolumeSpecName "kube-api-access-q9hwv". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:48:16.513627 kubelet[2491]: I1002 21:48:16.513597 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "cbfbcf26-6e75-44ea-aa34-8d9a81082c88" (UID: "cbfbcf26-6e75-44ea-aa34-8d9a81082c88"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:48:16.602950 kubelet[2491]: I1002 21:48:16.602910 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/be41ff3c-3a55-45fb-a00c-e18b6cb9046a-cilium-config-path\") pod \"be41ff3c-3a55-45fb-a00c-e18b6cb9046a\" (UID: \"be41ff3c-3a55-45fb-a00c-e18b6cb9046a\") " Oct 2 21:48:16.603129 kubelet[2491]: I1002 21:48:16.602961 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-7lwwc\" (UniqueName: \"kubernetes.io/projected/be41ff3c-3a55-45fb-a00c-e18b6cb9046a-kube-api-access-7lwwc\") pod \"be41ff3c-3a55-45fb-a00c-e18b6cb9046a\" (UID: \"be41ff3c-3a55-45fb-a00c-e18b6cb9046a\") " Oct 2 21:48:16.603129 kubelet[2491]: I1002 21:48:16.602998 2491 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-q9hwv\" (UniqueName: \"kubernetes.io/projected/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-kube-api-access-q9hwv\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.603129 kubelet[2491]: I1002 21:48:16.603011 2491 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-etc-cni-netd\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.603129 kubelet[2491]: I1002 21:48:16.603022 2491 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cni-path\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.603129 kubelet[2491]: I1002 21:48:16.603031 2491 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-bpf-maps\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.603129 kubelet[2491]: I1002 21:48:16.603040 2491 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-hostproc\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.603129 kubelet[2491]: I1002 21:48:16.603050 2491 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cilium-config-path\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.603335 kubelet[2491]: I1002 21:48:16.603061 2491 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cilium-run\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.603335 kubelet[2491]: I1002 21:48:16.603071 2491 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-hubble-tls\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.603335 kubelet[2491]: I1002 21:48:16.603082 2491 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-xtables-lock\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.603335 kubelet[2491]: I1002 21:48:16.603116 2491 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-cilium-cgroup\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.603335 kubelet[2491]: I1002 21:48:16.603125 2491 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.603335 kubelet[2491]: I1002 21:48:16.603134 2491 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-host-proc-sys-net\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.603335 kubelet[2491]: I1002 21:48:16.603145 2491 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-lib-modules\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.603335 kubelet[2491]: I1002 21:48:16.603156 2491 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/cbfbcf26-6e75-44ea-aa34-8d9a81082c88-clustermesh-secrets\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.603607 kubelet[2491]: W1002 21:48:16.603571 2491 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/be41ff3c-3a55-45fb-a00c-e18b6cb9046a/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 21:48:16.605235 kubelet[2491]: I1002 21:48:16.605208 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/be41ff3c-3a55-45fb-a00c-e18b6cb9046a-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "be41ff3c-3a55-45fb-a00c-e18b6cb9046a" (UID: "be41ff3c-3a55-45fb-a00c-e18b6cb9046a"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 21:48:16.609271 kubelet[2491]: I1002 21:48:16.609230 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/be41ff3c-3a55-45fb-a00c-e18b6cb9046a-kube-api-access-7lwwc" (OuterVolumeSpecName: "kube-api-access-7lwwc") pod "be41ff3c-3a55-45fb-a00c-e18b6cb9046a" (UID: "be41ff3c-3a55-45fb-a00c-e18b6cb9046a"). InnerVolumeSpecName "kube-api-access-7lwwc". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:48:16.703541 kubelet[2491]: I1002 21:48:16.703498 2491 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-7lwwc\" (UniqueName: \"kubernetes.io/projected/be41ff3c-3a55-45fb-a00c-e18b6cb9046a-kube-api-access-7lwwc\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.703541 kubelet[2491]: I1002 21:48:16.703530 2491 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/be41ff3c-3a55-45fb-a00c-e18b6cb9046a-cilium-config-path\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:48:16.855487 kubelet[2491]: I1002 21:48:16.855459 2491 scope.go:115] "RemoveContainer" containerID="b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5" Oct 2 21:48:16.857286 env[1351]: time="2023-10-02T21:48:16.856966094Z" level=info msg="RemoveContainer for \"b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5\"" Oct 2 21:48:16.862877 systemd[1]: Removed slice kubepods-burstable-podcbfbcf26_6e75_44ea_aa34_8d9a81082c88.slice. Oct 2 21:48:16.866466 env[1351]: time="2023-10-02T21:48:16.866245251Z" level=info msg="RemoveContainer for \"b4333d9991be684329f7ae93d483a5dc4c6186cc839aa037e2d66b4a4e6ed3b5\" returns successfully" Oct 2 21:48:16.867081 kubelet[2491]: I1002 21:48:16.867061 2491 scope.go:115] "RemoveContainer" containerID="7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d" Oct 2 21:48:16.869324 env[1351]: time="2023-10-02T21:48:16.868845051Z" level=info msg="RemoveContainer for \"7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d\"" Oct 2 21:48:16.873655 systemd[1]: Removed slice kubepods-besteffort-podbe41ff3c_3a55_45fb_a00c_e18b6cb9046a.slice. Oct 2 21:48:16.878514 env[1351]: time="2023-10-02T21:48:16.878398248Z" level=info msg="RemoveContainer for \"7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d\" returns successfully" Oct 2 21:48:16.879055 kubelet[2491]: I1002 21:48:16.879028 2491 scope.go:115] "RemoveContainer" containerID="7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d" Oct 2 21:48:16.881576 env[1351]: time="2023-10-02T21:48:16.881431047Z" level=error msg="ContainerStatus for \"7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d\": not found" Oct 2 21:48:16.881887 kubelet[2491]: E1002 21:48:16.881870 2491 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d\": not found" containerID="7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d" Oct 2 21:48:16.882019 kubelet[2491]: I1002 21:48:16.882008 2491 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d} err="failed to get container status \"7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d\": rpc error: code = NotFound desc = an error occurred when try to find container \"7174df7c9c07cf57165b6e087a1f432219080fa8e81fc970e08d23fb44c4098d\": not found" Oct 2 21:48:17.161518 kubelet[2491]: I1002 21:48:17.161137 2491 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=be41ff3c-3a55-45fb-a00c-e18b6cb9046a path="/var/lib/kubelet/pods/be41ff3c-3a55-45fb-a00c-e18b6cb9046a/volumes" Oct 2 21:48:17.161873 kubelet[2491]: I1002 21:48:17.161846 2491 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=cbfbcf26-6e75-44ea-aa34-8d9a81082c88 path="/var/lib/kubelet/pods/cbfbcf26-6e75-44ea-aa34-8d9a81082c88/volumes" Oct 2 21:48:17.229462 systemd[1]: var-lib-kubelet-pods-cbfbcf26\x2d6e75\x2d44ea\x2daa34\x2d8d9a81082c88-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dq9hwv.mount: Deactivated successfully. Oct 2 21:48:17.229575 systemd[1]: var-lib-kubelet-pods-be41ff3c\x2d3a55\x2d45fb\x2da00c\x2de18b6cb9046a-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d7lwwc.mount: Deactivated successfully. Oct 2 21:48:17.229628 systemd[1]: var-lib-kubelet-pods-cbfbcf26\x2d6e75\x2d44ea\x2daa34\x2d8d9a81082c88-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 21:48:17.229677 systemd[1]: var-lib-kubelet-pods-cbfbcf26\x2d6e75\x2d44ea\x2daa34\x2d8d9a81082c88-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 21:48:18.256672 sshd[3413]: pam_unix(sshd:session): session closed for user core Oct 2 21:48:18.256000 audit[3413]: USER_END pid=3413 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:18.283356 systemd[1]: sshd@28-10.200.20.15:22-10.200.12.6:37350.service: Deactivated successfully. Oct 2 21:48:18.256000 audit[3413]: CRED_DISP pid=3413 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:18.305220 kernel: audit: type=1106 audit(1696283298.256:1373): pid=3413 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:18.305343 kernel: audit: type=1104 audit(1696283298.256:1374): pid=3413 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:18.284100 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 21:48:18.284301 systemd[1]: session-31.scope: Consumed 1.958s CPU time. Oct 2 21:48:18.282000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.15:22-10.200.12.6:37350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:48:18.305725 systemd-logind[1339]: Session 31 logged out. Waiting for processes to exit. Oct 2 21:48:18.326841 kernel: audit: type=1131 audit(1696283298.282:1375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.15:22-10.200.12.6:37350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:48:18.331189 systemd-logind[1339]: Removed session 31. Oct 2 21:48:18.332885 systemd[1]: Started sshd@29-10.200.20.15:22-10.200.12.6:39920.service. Oct 2 21:48:18.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.15:22-10.200.12.6:39920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:48:18.356219 kernel: audit: type=1130 audit(1696283298.331:1376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.15:22-10.200.12.6:39920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:48:18.726000 audit[3527]: USER_ACCT pid=3527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:18.727854 sshd[3527]: Accepted publickey for core from 10.200.12.6 port 39920 ssh2: RSA SHA256:voVmd2tavmWwEgdV6bXHxdNsW1fH1DtXnoydjFOhVNQ Oct 2 21:48:18.728000 audit[3527]: CRED_ACQ pid=3527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:18.728000 audit[3527]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfa1b4c0 a2=3 a3=1 items=0 ppid=1 pid=3527 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:48:18.728000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 21:48:18.729785 sshd[3527]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 21:48:18.734175 systemd[1]: Started session-32.scope. Oct 2 21:48:18.734644 systemd-logind[1339]: New session 32 of user core. Oct 2 21:48:18.738000 audit[3527]: USER_START pid=3527 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:18.740000 audit[3529]: CRED_ACQ pid=3529 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:48:19.966504 kubelet[2491]: I1002 21:48:19.966450 2491 topology_manager.go:210] "Topology Admit Handler" Oct 2 21:48:19.966948 kubelet[2491]: E1002 21:48:19.966929 2491 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="cbfbcf26-6e75-44ea-aa34-8d9a81082c88" containerName="mount-cgroup" Oct 2 21:48:19.967015 kubelet[2491]: E1002 21:48:19.967006 2491 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="cbfbcf26-6e75-44ea-aa34-8d9a81082c88" containerName="mount-cgroup" Oct 2 21:48:19.967067 kubelet[2491]: E1002 21:48:19.967060 2491 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="be41ff3c-3a55-45fb-a00c-e18b6cb9046a" containerName="cilium-operator" Oct 2 21:48:19.967119 kubelet[2491]: E1002 21:48:19.967112 2491 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="cbfbcf26-6e75-44ea-aa34-8d9a81082c88" containerName="mount-cgroup" Oct 2 21:48:19.967170 kubelet[2491]: E1002 21:48:19.967162 2491 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="cbfbcf26-6e75-44ea-aa34-8d9a81082c88" containerName="mount-cgroup" Oct 2 21:48:19.967270 kubelet[2491]: E1002 21:48:19.967260 2491 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="cbfbcf26-6e75-44ea-aa34-8d9a81082c88" containerName="mount-cgroup" Oct 2 21:48:19.967327 kubelet[2491]: E1002 21:48:19.967318 2491 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="cbfbcf26-6e75-44ea-aa34-8d9a81082c88" containerName="mount-cgroup" Oct 2 21:48:19.967411 kubelet[2491]: I1002 21:48:19.967402 2491 memory_manager.go:346] "RemoveStaleState removing state" podUID="cbfbcf26-6e75-44ea-aa34-8d9a81082c88" containerName="mount-cgroup" Oct 2 21:48:19.967466 kubelet[2491]: I1002 21:48:19.967458 2491 memory_manager.go:346] "RemoveStaleState removing state" podUID="cbfbcf26-6e75-44ea-aa34-8d9a81082c88" containerName="mount-cgroup" Oct 2 21:48:19.967518 kubelet[2491]: I1002 21:48:19.967510 2491 memory_manager.go:346] "RemoveStaleState removing state" podUID="cbfbcf26-6e75-44ea-aa34-8d9a81082c88" containerName="mount-cgroup" Oct 2 21:48:19.967571 kubelet[2491]: I1002 21:48:19.967563 2491 memory_manager.go:346] "RemoveStaleState removing state" podUID="be41ff3c-3a55-45fb-a00c-e18b6cb9046a" containerName="cilium-operator" Oct 2 21:48:19.967634 kubelet[2491]: I1002 21:48:19.967623 2491 memory_manager.go:346] "RemoveStaleState removing state" podUID="cbfbcf26-6e75-44ea-aa34-8d9a81082c88" containerName="mount-cgroup" Oct 2 21:48:19.967688 kubelet[2491]: I1002 21:48:19.967681 2491 memory_manager.go:346] "RemoveStaleState removing state" podUID="cbfbcf26-6e75-44ea-aa34-8d9a81082c88" containerName="mount-cgroup" Oct 2 21:48:19.967774 kubelet[2491]: I1002 21:48:19.967765 2491 memory_manager.go:346] "RemoveStaleState removing state" podUID="cbfbcf26-6e75-44ea-aa34-8d9a81082c88" containerName="mount-cgroup" Oct 2 21:48:19.973836 systemd[1]: Created slice kubepods-burstable-pod6a92f1db_3691_483f_93aa_3ba3b4c0eeb8.slice. Oct 2 21:48:20.136166 kubelet[2491]: I1002 21:48:20.136121 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-host-proc-sys-net\") pod \"cilium-bks2h\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " pod="kube-system/cilium-bks2h" Oct 2 21:48:20.136166 kubelet[2491]: I1002 21:48:20.136170 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-host-proc-sys-kernel\") pod \"cilium-bks2h\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " pod="kube-system/cilium-bks2h" Oct 2 21:48:20.136381 kubelet[2491]: I1002 21:48:20.136207 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kvgpz\" (UniqueName: \"kubernetes.io/projected/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-kube-api-access-kvgpz\") pod \"cilium-bks2h\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " pod="kube-system/cilium-bks2h" Oct 2 21:48:20.136381 kubelet[2491]: I1002 21:48:20.136230 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-ipsec-secrets\") pod \"cilium-bks2h\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " pod="kube-system/cilium-bks2h" Oct 2 21:48:20.136381 kubelet[2491]: I1002 21:48:20.136253 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-hostproc\") pod \"cilium-bks2h\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " pod="kube-system/cilium-bks2h" Oct 2 21:48:20.136381 kubelet[2491]: I1002 21:48:20.136274 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-etc-cni-netd\") pod \"cilium-bks2h\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " pod="kube-system/cilium-bks2h" Oct 2 21:48:20.136381 kubelet[2491]: I1002 21:48:20.136293 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-hubble-tls\") pod \"cilium-bks2h\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " pod="kube-system/cilium-bks2h" Oct 2 21:48:20.136381 kubelet[2491]: I1002 21:48:20.136316 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-bpf-maps\") pod \"cilium-bks2h\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " pod="kube-system/cilium-bks2h" Oct 2 21:48:20.136528 kubelet[2491]: I1002 21:48:20.136337 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cni-path\") pod \"cilium-bks2h\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " pod="kube-system/cilium-bks2h" Oct 2 21:48:20.136528 kubelet[2491]: I1002 21:48:20.136356 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-cgroup\") pod \"cilium-bks2h\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " pod="kube-system/cilium-bks2h" Oct 2 21:48:20.136528 kubelet[2491]: I1002 21:48:20.136380 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-config-path\") pod \"cilium-bks2h\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " pod="kube-system/cilium-bks2h" Oct 2 21:48:20.136528 kubelet[2491]: I1002 21:48:20.136401 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-run\") pod \"cilium-bks2h\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " pod="kube-system/cilium-bks2h" Oct 2 21:48:20.136528 kubelet[2491]: I1002 21:48:20.136420 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-clustermesh-secrets\") pod \"cilium-bks2h\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " pod="kube-system/cilium-bks2h" Oct 2 21:48:20.136528 kubelet[2491]: I1002 21:48:20.136439 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-lib-modules\") pod \"cilium-bks2h\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " pod="kube-system/cilium-bks2h" Oct 2 21:48:20.136671 kubelet[2491]: I1002 21:48:20.136461 2491 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-xtables-lock\") pod \"cilium-bks2h\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " pod="kube-system/cilium-bks2h" Oct 2 21:48:20.200065 kubelet[2491]: E1002 21:48:20.200030 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:48:20.281510 env[1351]: time="2023-10-02T21:48:20.281064837Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-bks2h,Uid:6a92f1db-3691-483f-93aa-3ba3b4c0eeb8,Namespace:kube-system,Attempt:0,}" Oct 2 21:48:20.321248 env[1351]: time="2023-10-02T21:48:20.321118545Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 21:48:20.321407 env[1351]: time="2023-10-02T21:48:20.321260625Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 21:48:20.321407 env[1351]: time="2023-10-02T21:48:20.321287385Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 21:48:20.321642 env[1351]: time="2023-10-02T21:48:20.321602665Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7 pid=3546 runtime=io.containerd.runc.v2 Oct 2 21:48:20.335135 systemd[1]: Started cri-containerd-36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7.scope. Oct 2 21:48:20.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.352000 audit: BPF prog-id=126 op=LOAD Oct 2 21:48:20.353000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.353000 audit[3556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3546 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:48:20.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336663433336432353939633537616131656534386662343732613637 Oct 2 21:48:20.353000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.353000 audit[3556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3546 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:48:20.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336663433336432353939633537616131656534386662343732613637 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit: BPF prog-id=127 op=LOAD Oct 2 21:48:20.354000 audit[3556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3546 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:48:20.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336663433336432353939633537616131656534386662343732613637 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.354000 audit: BPF prog-id=128 op=LOAD Oct 2 21:48:20.354000 audit[3556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3546 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:48:20.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336663433336432353939633537616131656534386662343732613637 Oct 2 21:48:20.355000 audit: BPF prog-id=128 op=UNLOAD Oct 2 21:48:20.355000 audit: BPF prog-id=127 op=UNLOAD Oct 2 21:48:20.355000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.355000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.355000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.355000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.355000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.355000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.355000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.355000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.355000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.355000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 21:48:20.355000 audit: BPF prog-id=129 op=LOAD Oct 2 21:48:20.355000 audit[3556]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3546 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 21:48:20.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336663433336432353939633537616131656534386662343732613637 Oct 2 21:48:20.374209 env[1351]: time="2023-10-02T21:48:20.374128169Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-bks2h,Uid:6a92f1db-3691-483f-93aa-3ba3b4c0eeb8,Namespace:kube-system,Attempt:0,} returns sandbox id \"36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7\"" Oct 2 21:48:20.379608 env[1351]: time="2023-10-02T21:48:20.379511527Z" level=info msg="CreateContainer within sandbox \"36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 21:48:20.414377 env[1351]: time="2023-10-02T21:48:20.414323837Z" level=info msg="CreateContainer within sandbox \"36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01\"" Oct 2 21:48:20.415145 env[1351]: time="2023-10-02T21:48:20.415114277Z" level=info msg="StartContainer for \"df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01\"" Oct 2 21:48:20.435969 systemd[1]: Started cri-containerd-df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01.scope. Oct 2 21:48:20.451781 systemd[1]: cri-containerd-df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01.scope: Deactivated successfully. Oct 2 21:48:20.527940 env[1351]: time="2023-10-02T21:48:20.527890203Z" level=info msg="shim disconnected" id=df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01 Oct 2 21:48:20.528246 env[1351]: time="2023-10-02T21:48:20.528222483Z" level=warning msg="cleaning up after shim disconnected" id=df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01 namespace=k8s.io Oct 2 21:48:20.528317 env[1351]: time="2023-10-02T21:48:20.528304283Z" level=info msg="cleaning up dead shim" Oct 2 21:48:20.543373 env[1351]: time="2023-10-02T21:48:20.543268118Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:48:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3604 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:48:20Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:48:20.544611 env[1351]: time="2023-10-02T21:48:20.544508118Z" level=error msg="copy shim log" error="read /proc/self/fd/38: file already closed" Oct 2 21:48:20.544980 env[1351]: time="2023-10-02T21:48:20.544924878Z" level=error msg="Failed to pipe stderr of container \"df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01\"" error="reading from a closed fifo" Oct 2 21:48:20.545090 env[1351]: time="2023-10-02T21:48:20.544938958Z" level=error msg="Failed to pipe stdout of container \"df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01\"" error="reading from a closed fifo" Oct 2 21:48:20.549144 env[1351]: time="2023-10-02T21:48:20.549075796Z" level=error msg="StartContainer for \"df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:48:20.549365 kubelet[2491]: E1002 21:48:20.549336 2491 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01" Oct 2 21:48:20.549457 kubelet[2491]: E1002 21:48:20.549439 2491 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:48:20.549457 kubelet[2491]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:48:20.549457 kubelet[2491]: rm /hostbin/cilium-mount Oct 2 21:48:20.549457 kubelet[2491]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-kvgpz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-bks2h_kube-system(6a92f1db-3691-483f-93aa-3ba3b4c0eeb8): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:48:20.549612 kubelet[2491]: E1002 21:48:20.549477 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bks2h" podUID=6a92f1db-3691-483f-93aa-3ba3b4c0eeb8 Oct 2 21:48:20.878211 env[1351]: time="2023-10-02T21:48:20.877664058Z" level=info msg="CreateContainer within sandbox \"36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 21:48:20.913447 env[1351]: time="2023-10-02T21:48:20.913380847Z" level=info msg="CreateContainer within sandbox \"36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f\"" Oct 2 21:48:20.913923 env[1351]: time="2023-10-02T21:48:20.913882247Z" level=info msg="StartContainer for \"a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f\"" Oct 2 21:48:20.935352 systemd[1]: Started cri-containerd-a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f.scope. Oct 2 21:48:20.952824 systemd[1]: cri-containerd-a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f.scope: Deactivated successfully. Oct 2 21:48:20.970626 env[1351]: time="2023-10-02T21:48:20.970557910Z" level=info msg="shim disconnected" id=a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f Oct 2 21:48:20.970888 env[1351]: time="2023-10-02T21:48:20.970870070Z" level=warning msg="cleaning up after shim disconnected" id=a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f namespace=k8s.io Oct 2 21:48:20.970963 env[1351]: time="2023-10-02T21:48:20.970951230Z" level=info msg="cleaning up dead shim" Oct 2 21:48:20.983722 env[1351]: time="2023-10-02T21:48:20.983675106Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:48:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3641 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:48:20Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:48:20.984156 env[1351]: time="2023-10-02T21:48:20.984098786Z" level=error msg="copy shim log" error="read /proc/self/fd/38: file already closed" Oct 2 21:48:20.986750 env[1351]: time="2023-10-02T21:48:20.984387026Z" level=error msg="Failed to pipe stdout of container \"a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f\"" error="reading from a closed fifo" Oct 2 21:48:20.986920 env[1351]: time="2023-10-02T21:48:20.986897105Z" level=error msg="Failed to pipe stderr of container \"a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f\"" error="reading from a closed fifo" Oct 2 21:48:20.992405 env[1351]: time="2023-10-02T21:48:20.992347903Z" level=error msg="StartContainer for \"a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:48:20.992802 kubelet[2491]: E1002 21:48:20.992771 2491 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f" Oct 2 21:48:20.993095 kubelet[2491]: E1002 21:48:20.992892 2491 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:48:20.993095 kubelet[2491]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:48:20.993095 kubelet[2491]: rm /hostbin/cilium-mount Oct 2 21:48:20.993095 kubelet[2491]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-kvgpz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-bks2h_kube-system(6a92f1db-3691-483f-93aa-3ba3b4c0eeb8): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:48:20.993257 kubelet[2491]: E1002 21:48:20.992948 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bks2h" podUID=6a92f1db-3691-483f-93aa-3ba3b4c0eeb8 Oct 2 21:48:21.871926 kubelet[2491]: I1002 21:48:21.871900 2491 scope.go:115] "RemoveContainer" containerID="df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01" Oct 2 21:48:21.872688 kubelet[2491]: I1002 21:48:21.872656 2491 scope.go:115] "RemoveContainer" containerID="df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01" Oct 2 21:48:21.874175 env[1351]: time="2023-10-02T21:48:21.874133557Z" level=info msg="RemoveContainer for \"df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01\"" Oct 2 21:48:21.874625 env[1351]: time="2023-10-02T21:48:21.874579157Z" level=info msg="RemoveContainer for \"df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01\"" Oct 2 21:48:21.874708 env[1351]: time="2023-10-02T21:48:21.874666277Z" level=error msg="RemoveContainer for \"df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01\" failed" error="failed to set removing state for container \"df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01\": container is already in removing state" Oct 2 21:48:21.874867 kubelet[2491]: E1002 21:48:21.874844 2491 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01\": container is already in removing state" containerID="df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01" Oct 2 21:48:21.874999 kubelet[2491]: I1002 21:48:21.874891 2491 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01} err="rpc error: code = Unknown desc = failed to set removing state for container \"df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01\": container is already in removing state" Oct 2 21:48:21.883717 env[1351]: time="2023-10-02T21:48:21.883654954Z" level=info msg="RemoveContainer for \"df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01\" returns successfully" Oct 2 21:48:21.884355 kubelet[2491]: E1002 21:48:21.884325 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-bks2h_kube-system(6a92f1db-3691-483f-93aa-3ba3b4c0eeb8)\"" pod="kube-system/cilium-bks2h" podUID=6a92f1db-3691-483f-93aa-3ba3b4c0eeb8 Oct 2 21:48:22.874792 kubelet[2491]: E1002 21:48:22.874760 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-bks2h_kube-system(6a92f1db-3691-483f-93aa-3ba3b4c0eeb8)\"" pod="kube-system/cilium-bks2h" podUID=6a92f1db-3691-483f-93aa-3ba3b4c0eeb8 Oct 2 21:48:23.634299 kubelet[2491]: W1002 21:48:23.634256 2491 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod6a92f1db_3691_483f_93aa_3ba3b4c0eeb8.slice/cri-containerd-df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01.scope WatchSource:0}: container "df9341502f4955b843e756c63ac9508f464e42f4706916f399de0e61613eff01" in namespace "k8s.io": not found Oct 2 21:48:25.201678 kubelet[2491]: E1002 21:48:25.201654 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:48:26.740378 kubelet[2491]: W1002 21:48:26.740335 2491 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod6a92f1db_3691_483f_93aa_3ba3b4c0eeb8.slice/cri-containerd-a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f.scope WatchSource:0}: task a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f not found: not found Oct 2 21:48:30.202982 kubelet[2491]: E1002 21:48:30.202956 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:48:35.204466 kubelet[2491]: E1002 21:48:35.204440 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:48:37.161679 env[1351]: time="2023-10-02T21:48:37.161629309Z" level=info msg="CreateContainer within sandbox \"36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 21:48:37.185128 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1282782113.mount: Deactivated successfully. Oct 2 21:48:37.188471 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2868023738.mount: Deactivated successfully. Oct 2 21:48:37.202355 env[1351]: time="2023-10-02T21:48:37.202305776Z" level=info msg="CreateContainer within sandbox \"36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e\"" Oct 2 21:48:37.203214 env[1351]: time="2023-10-02T21:48:37.202793495Z" level=info msg="StartContainer for \"99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e\"" Oct 2 21:48:37.225521 systemd[1]: Started cri-containerd-99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e.scope. Oct 2 21:48:37.242050 systemd[1]: cri-containerd-99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e.scope: Deactivated successfully. Oct 2 21:48:37.270730 env[1351]: time="2023-10-02T21:48:37.270676233Z" level=info msg="shim disconnected" id=99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e Oct 2 21:48:37.270730 env[1351]: time="2023-10-02T21:48:37.270726073Z" level=warning msg="cleaning up after shim disconnected" id=99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e namespace=k8s.io Oct 2 21:48:37.270730 env[1351]: time="2023-10-02T21:48:37.270736633Z" level=info msg="cleaning up dead shim" Oct 2 21:48:37.283340 env[1351]: time="2023-10-02T21:48:37.283288149Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:48:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3682 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:48:37Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:48:37.283644 env[1351]: time="2023-10-02T21:48:37.283561909Z" level=error msg="copy shim log" error="read /proc/self/fd/38: file already closed" Oct 2 21:48:37.283803 env[1351]: time="2023-10-02T21:48:37.283768989Z" level=error msg="Failed to pipe stdout of container \"99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e\"" error="reading from a closed fifo" Oct 2 21:48:37.286402 env[1351]: time="2023-10-02T21:48:37.286360548Z" level=error msg="Failed to pipe stderr of container \"99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e\"" error="reading from a closed fifo" Oct 2 21:48:37.290729 env[1351]: time="2023-10-02T21:48:37.290676547Z" level=error msg="StartContainer for \"99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:48:37.291211 kubelet[2491]: E1002 21:48:37.290945 2491 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e" Oct 2 21:48:37.291211 kubelet[2491]: E1002 21:48:37.291042 2491 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:48:37.291211 kubelet[2491]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:48:37.291211 kubelet[2491]: rm /hostbin/cilium-mount Oct 2 21:48:37.291564 kubelet[2491]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-kvgpz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-bks2h_kube-system(6a92f1db-3691-483f-93aa-3ba3b4c0eeb8): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:48:37.291628 kubelet[2491]: E1002 21:48:37.291075 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bks2h" podUID=6a92f1db-3691-483f-93aa-3ba3b4c0eeb8 Oct 2 21:48:37.897938 kubelet[2491]: I1002 21:48:37.897913 2491 scope.go:115] "RemoveContainer" containerID="a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f" Oct 2 21:48:37.898681 kubelet[2491]: I1002 21:48:37.898637 2491 scope.go:115] "RemoveContainer" containerID="a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f" Oct 2 21:48:37.901387 env[1351]: time="2023-10-02T21:48:37.901348028Z" level=info msg="RemoveContainer for \"a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f\"" Oct 2 21:48:37.902770 env[1351]: time="2023-10-02T21:48:37.902599907Z" level=info msg="RemoveContainer for \"a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f\"" Oct 2 21:48:37.902770 env[1351]: time="2023-10-02T21:48:37.902707907Z" level=error msg="RemoveContainer for \"a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f\" failed" error="failed to set removing state for container \"a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f\": container is already in removing state" Oct 2 21:48:37.902978 kubelet[2491]: E1002 21:48:37.902960 2491 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f\": container is already in removing state" containerID="a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f" Oct 2 21:48:37.903072 kubelet[2491]: E1002 21:48:37.903062 2491 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f": container is already in removing state; Skipping pod "cilium-bks2h_kube-system(6a92f1db-3691-483f-93aa-3ba3b4c0eeb8)" Oct 2 21:48:37.903463 kubelet[2491]: E1002 21:48:37.903447 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-bks2h_kube-system(6a92f1db-3691-483f-93aa-3ba3b4c0eeb8)\"" pod="kube-system/cilium-bks2h" podUID=6a92f1db-3691-483f-93aa-3ba3b4c0eeb8 Oct 2 21:48:37.911078 env[1351]: time="2023-10-02T21:48:37.911037905Z" level=info msg="RemoveContainer for \"a18997d1be7f670b85f7ff9958069dae9b9f765e8e03b8fbfa1db8d50e0bce6f\" returns successfully" Oct 2 21:48:38.182575 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e-rootfs.mount: Deactivated successfully. Oct 2 21:48:40.206415 kubelet[2491]: E1002 21:48:40.206384 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:48:40.375757 kubelet[2491]: W1002 21:48:40.375716 2491 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod6a92f1db_3691_483f_93aa_3ba3b4c0eeb8.slice/cri-containerd-99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e.scope WatchSource:0}: task 99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e not found: not found Oct 2 21:48:45.207389 kubelet[2491]: E1002 21:48:45.207350 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:48:49.159456 kubelet[2491]: E1002 21:48:49.159412 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-bks2h_kube-system(6a92f1db-3691-483f-93aa-3ba3b4c0eeb8)\"" pod="kube-system/cilium-bks2h" podUID=6a92f1db-3691-483f-93aa-3ba3b4c0eeb8 Oct 2 21:48:50.208208 kubelet[2491]: E1002 21:48:50.208170 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:48:55.209776 kubelet[2491]: E1002 21:48:55.209743 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:49:00.210631 kubelet[2491]: E1002 21:49:00.210601 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:49:04.161372 env[1351]: time="2023-10-02T21:49:04.159940469Z" level=info msg="CreateContainer within sandbox \"36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 21:49:04.177665 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3848757466.mount: Deactivated successfully. Oct 2 21:49:04.182924 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2610300596.mount: Deactivated successfully. Oct 2 21:49:04.198638 env[1351]: time="2023-10-02T21:49:04.198593575Z" level=info msg="CreateContainer within sandbox \"36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f\"" Oct 2 21:49:04.200548 env[1351]: time="2023-10-02T21:49:04.199839255Z" level=info msg="StartContainer for \"17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f\"" Oct 2 21:49:04.229555 systemd[1]: Started cri-containerd-17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f.scope. Oct 2 21:49:04.247119 systemd[1]: cri-containerd-17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f.scope: Deactivated successfully. Oct 2 21:49:04.275746 env[1351]: time="2023-10-02T21:49:04.275698188Z" level=info msg="shim disconnected" id=17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f Oct 2 21:49:04.276201 env[1351]: time="2023-10-02T21:49:04.276157428Z" level=warning msg="cleaning up after shim disconnected" id=17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f namespace=k8s.io Oct 2 21:49:04.276285 env[1351]: time="2023-10-02T21:49:04.276271108Z" level=info msg="cleaning up dead shim" Oct 2 21:49:04.289305 env[1351]: time="2023-10-02T21:49:04.289255543Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:49:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3723 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T21:49:04Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 21:49:04.289740 env[1351]: time="2023-10-02T21:49:04.289682543Z" level=error msg="copy shim log" error="read /proc/self/fd/38: file already closed" Oct 2 21:49:04.290283 env[1351]: time="2023-10-02T21:49:04.290251503Z" level=error msg="Failed to pipe stdout of container \"17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f\"" error="reading from a closed fifo" Oct 2 21:49:04.290408 env[1351]: time="2023-10-02T21:49:04.290267703Z" level=error msg="Failed to pipe stderr of container \"17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f\"" error="reading from a closed fifo" Oct 2 21:49:04.294246 env[1351]: time="2023-10-02T21:49:04.294195462Z" level=error msg="StartContainer for \"17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 21:49:04.294590 kubelet[2491]: E1002 21:49:04.294421 2491 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f" Oct 2 21:49:04.294590 kubelet[2491]: E1002 21:49:04.294531 2491 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 21:49:04.294590 kubelet[2491]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 21:49:04.294590 kubelet[2491]: rm /hostbin/cilium-mount Oct 2 21:49:04.296137 kubelet[2491]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-kvgpz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-bks2h_kube-system(6a92f1db-3691-483f-93aa-3ba3b4c0eeb8): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 21:49:04.296247 kubelet[2491]: E1002 21:49:04.294568 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bks2h" podUID=6a92f1db-3691-483f-93aa-3ba3b4c0eeb8 Oct 2 21:49:04.940900 kubelet[2491]: I1002 21:49:04.940360 2491 scope.go:115] "RemoveContainer" containerID="99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e" Oct 2 21:49:04.940900 kubelet[2491]: I1002 21:49:04.940697 2491 scope.go:115] "RemoveContainer" containerID="99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e" Oct 2 21:49:04.942419 env[1351]: time="2023-10-02T21:49:04.942381392Z" level=info msg="RemoveContainer for \"99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e\"" Oct 2 21:49:04.942774 env[1351]: time="2023-10-02T21:49:04.942751192Z" level=info msg="RemoveContainer for \"99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e\"" Oct 2 21:49:04.942962 env[1351]: time="2023-10-02T21:49:04.942915912Z" level=error msg="RemoveContainer for \"99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e\" failed" error="failed to set removing state for container \"99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e\": container is already in removing state" Oct 2 21:49:04.943246 kubelet[2491]: E1002 21:49:04.943231 2491 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e\": container is already in removing state" containerID="99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e" Oct 2 21:49:04.943378 kubelet[2491]: E1002 21:49:04.943367 2491 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e": container is already in removing state; Skipping pod "cilium-bks2h_kube-system(6a92f1db-3691-483f-93aa-3ba3b4c0eeb8)" Oct 2 21:49:04.943735 kubelet[2491]: E1002 21:49:04.943720 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-bks2h_kube-system(6a92f1db-3691-483f-93aa-3ba3b4c0eeb8)\"" pod="kube-system/cilium-bks2h" podUID=6a92f1db-3691-483f-93aa-3ba3b4c0eeb8 Oct 2 21:49:04.951326 env[1351]: time="2023-10-02T21:49:04.951273149Z" level=info msg="RemoveContainer for \"99d016de89fa2f68779c0355ce62a8dcd77e376b7ac6ffc5e3dd15c7564d568e\" returns successfully" Oct 2 21:49:05.175305 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f-rootfs.mount: Deactivated successfully. Oct 2 21:49:05.212133 kubelet[2491]: E1002 21:49:05.211770 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:49:07.381353 kubelet[2491]: W1002 21:49:07.381306 2491 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod6a92f1db_3691_483f_93aa_3ba3b4c0eeb8.slice/cri-containerd-17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f.scope WatchSource:0}: task 17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f not found: not found Oct 2 21:49:10.212720 kubelet[2491]: E1002 21:49:10.212695 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:49:10.388000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:10.394910 kernel: kauditd_printk_skb: 64 callbacks suppressed Oct 2 21:49:10.395058 kernel: audit: type=1400 audit(1696283350.388:1400): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:10.388000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:10.439681 kernel: audit: type=1400 audit(1696283350.388:1401): avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:10.388000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40011bcba0 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:49:10.469408 kernel: audit: type=1300 audit(1696283350.388:1401): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40011bcba0 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:49:10.470071 kernel: audit: type=1327 audit(1696283350.388:1401): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:49:10.388000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:49:10.388000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c2a330 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:49:10.522020 kernel: audit: type=1300 audit(1696283350.388:1400): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c2a330 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:49:10.522153 kernel: audit: type=1327 audit(1696283350.388:1400): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:49:10.388000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:49:11.598000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:11.598000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400d4de990 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:49:11.648803 kernel: audit: type=1400 audit(1696283351.598:1402): avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:11.648932 kernel: audit: type=1300 audit(1696283351.598:1402): arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400d4de990 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:49:11.648970 kernel: audit: type=1327 audit(1696283351.598:1402): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:49:11.598000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:49:11.619000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:11.694859 kernel: audit: type=1400 audit(1696283351.619:1403): avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:11.619000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400d3acc90 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:49:11.619000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:49:11.620000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:11.620000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400d10ec80 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:49:11.620000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:49:11.648000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:11.648000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400d3acd80 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:49:11.648000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:49:11.648000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:11.648000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400d3acde0 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:49:11.648000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:49:11.648000 audit[2317]: AVC avc: denied { watch } for pid=2317 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:11.648000 audit[2317]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=55 a1=400cefe6c0 a2=fc6 a3=0 items=0 ppid=2180 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c779,c952 key=(null) Oct 2 21:49:11.648000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 21:49:14.031000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:14.031000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40011bd220 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:49:14.031000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:49:14.031000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:14.031000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40008b7a80 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:49:14.031000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:49:14.033000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:14.033000 audit[2376]: AVC avc: denied { watch } for pid=2376 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 21:49:14.033000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40008b7d40 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:49:14.033000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:49:14.033000 audit[2376]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40011bd260 a2=fc6 a3=0 items=0 ppid=2222 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c387,c529 key=(null) Oct 2 21:49:14.033000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 21:49:14.962166 env[1351]: time="2023-10-02T21:49:14.961973677Z" level=info msg="StopPodSandbox for \"09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094\"" Oct 2 21:49:14.962166 env[1351]: time="2023-10-02T21:49:14.962074037Z" level=info msg="TearDown network for sandbox \"09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094\" successfully" Oct 2 21:49:14.962166 env[1351]: time="2023-10-02T21:49:14.962116517Z" level=info msg="StopPodSandbox for \"09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094\" returns successfully" Oct 2 21:49:14.962921 env[1351]: time="2023-10-02T21:49:14.962888917Z" level=info msg="RemovePodSandbox for \"09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094\"" Oct 2 21:49:14.962988 env[1351]: time="2023-10-02T21:49:14.962920877Z" level=info msg="Forcibly stopping sandbox \"09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094\"" Oct 2 21:49:14.963015 env[1351]: time="2023-10-02T21:49:14.962987557Z" level=info msg="TearDown network for sandbox \"09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094\" successfully" Oct 2 21:49:14.971611 env[1351]: time="2023-10-02T21:49:14.971557393Z" level=info msg="RemovePodSandbox \"09898eff5be173ffee7d7bf1ca2526f1739be39f975a0f100cab5dcfd95f4094\" returns successfully" Oct 2 21:49:14.972207 env[1351]: time="2023-10-02T21:49:14.972154113Z" level=info msg="StopPodSandbox for \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\"" Oct 2 21:49:14.972438 env[1351]: time="2023-10-02T21:49:14.972339873Z" level=info msg="TearDown network for sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" successfully" Oct 2 21:49:14.972438 env[1351]: time="2023-10-02T21:49:14.972380313Z" level=info msg="StopPodSandbox for \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" returns successfully" Oct 2 21:49:14.973205 env[1351]: time="2023-10-02T21:49:14.972656793Z" level=info msg="RemovePodSandbox for \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\"" Oct 2 21:49:14.973205 env[1351]: time="2023-10-02T21:49:14.972684313Z" level=info msg="Forcibly stopping sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\"" Oct 2 21:49:14.973205 env[1351]: time="2023-10-02T21:49:14.972738073Z" level=info msg="TearDown network for sandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" successfully" Oct 2 21:49:14.980683 env[1351]: time="2023-10-02T21:49:14.980573590Z" level=info msg="RemovePodSandbox \"fe981ecbed025dc3d9a7f92036aa5caf5955180da34e4f8c2cca7ba116fef751\" returns successfully" Oct 2 21:49:15.214202 kubelet[2491]: E1002 21:49:15.213773 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:49:20.157998 kubelet[2491]: E1002 21:49:20.157967 2491 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-bks2h_kube-system(6a92f1db-3691-483f-93aa-3ba3b4c0eeb8)\"" pod="kube-system/cilium-bks2h" podUID=6a92f1db-3691-483f-93aa-3ba3b4c0eeb8 Oct 2 21:49:20.215122 kubelet[2491]: E1002 21:49:20.215090 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 21:49:21.197422 env[1351]: time="2023-10-02T21:49:21.197249082Z" level=info msg="StopPodSandbox for \"36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7\"" Oct 2 21:49:21.197422 env[1351]: time="2023-10-02T21:49:21.197314962Z" level=info msg="Container to stop \"17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 21:49:21.198807 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7-shm.mount: Deactivated successfully. Oct 2 21:49:21.212497 systemd[1]: cri-containerd-36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7.scope: Deactivated successfully. Oct 2 21:49:21.211000 audit: BPF prog-id=126 op=UNLOAD Oct 2 21:49:21.218322 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 21:49:21.218410 kernel: audit: type=1334 audit(1696283361.211:1412): prog-id=126 op=UNLOAD Oct 2 21:49:21.225000 audit: BPF prog-id=129 op=UNLOAD Oct 2 21:49:21.237819 kernel: audit: type=1334 audit(1696283361.225:1413): prog-id=129 op=UNLOAD Oct 2 21:49:21.273612 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7-rootfs.mount: Deactivated successfully. Oct 2 21:49:21.328210 sshd[3527]: pam_unix(sshd:session): session closed for user core Oct 2 21:49:21.328000 audit[3527]: USER_END pid=3527 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:49:21.357032 systemd[1]: sshd@29-10.200.20.15:22-10.200.12.6:39920.service: Deactivated successfully. Oct 2 21:49:21.357821 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 21:49:21.358005 systemd[1]: session-32.scope: Consumed 1.279s CPU time. Oct 2 21:49:21.328000 audit[3527]: CRED_DISP pid=3527 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:49:21.380388 kernel: audit: type=1106 audit(1696283361.328:1414): pid=3527 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:49:21.380545 kernel: audit: type=1104 audit(1696283361.328:1415): pid=3527 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 21:49:21.380789 systemd-logind[1339]: Session 32 logged out. Waiting for processes to exit. Oct 2 21:49:21.381533 env[1351]: time="2023-10-02T21:49:21.381082135Z" level=info msg="shim disconnected" id=36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7 Oct 2 21:49:21.381533 env[1351]: time="2023-10-02T21:49:21.381131775Z" level=warning msg="cleaning up after shim disconnected" id=36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7 namespace=k8s.io Oct 2 21:49:21.381533 env[1351]: time="2023-10-02T21:49:21.381140135Z" level=info msg="cleaning up dead shim" Oct 2 21:49:21.356000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.15:22-10.200.12.6:39920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:49:21.402828 kernel: audit: type=1131 audit(1696283361.356:1416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.15:22-10.200.12.6:39920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 21:49:21.403058 env[1351]: time="2023-10-02T21:49:21.402986087Z" level=warning msg="cleanup warnings time=\"2023-10-02T21:49:21Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3757 runtime=io.containerd.runc.v2\n" Oct 2 21:49:21.403781 env[1351]: time="2023-10-02T21:49:21.403331007Z" level=info msg="TearDown network for sandbox \"36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7\" successfully" Oct 2 21:49:21.403781 env[1351]: time="2023-10-02T21:49:21.403358007Z" level=info msg="StopPodSandbox for \"36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7\" returns successfully" Oct 2 21:49:21.403546 systemd-logind[1339]: Removed session 32. Oct 2 21:49:21.555268 kubelet[2491]: I1002 21:49:21.552899 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-host-proc-sys-net\") pod \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " Oct 2 21:49:21.555268 kubelet[2491]: I1002 21:49:21.552942 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cni-path\") pod \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " Oct 2 21:49:21.555268 kubelet[2491]: I1002 21:49:21.552961 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-xtables-lock\") pod \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " Oct 2 21:49:21.555268 kubelet[2491]: I1002 21:49:21.552977 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-hostproc\") pod \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " Oct 2 21:49:21.555268 kubelet[2491]: I1002 21:49:21.552994 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-run\") pod \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " Oct 2 21:49:21.555268 kubelet[2491]: I1002 21:49:21.552988 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8" (UID: "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:49:21.555725 kubelet[2491]: I1002 21:49:21.553017 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-clustermesh-secrets\") pod \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " Oct 2 21:49:21.555725 kubelet[2491]: I1002 21:49:21.553024 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8" (UID: "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:49:21.555725 kubelet[2491]: I1002 21:49:21.553039 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-host-proc-sys-kernel\") pod \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " Oct 2 21:49:21.555725 kubelet[2491]: I1002 21:49:21.553045 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cni-path" (OuterVolumeSpecName: "cni-path") pod "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8" (UID: "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:49:21.555725 kubelet[2491]: I1002 21:49:21.553056 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-etc-cni-netd\") pod \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " Oct 2 21:49:21.555847 kubelet[2491]: I1002 21:49:21.553061 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8" (UID: "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:49:21.555847 kubelet[2491]: I1002 21:49:21.553076 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-config-path\") pod \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " Oct 2 21:49:21.555847 kubelet[2491]: I1002 21:49:21.553093 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-lib-modules\") pod \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " Oct 2 21:49:21.555847 kubelet[2491]: I1002 21:49:21.553076 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-hostproc" (OuterVolumeSpecName: "hostproc") pod "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8" (UID: "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:49:21.555847 kubelet[2491]: I1002 21:49:21.553139 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-bpf-maps\") pod \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " Oct 2 21:49:21.555967 kubelet[2491]: I1002 21:49:21.553146 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8" (UID: "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:49:21.555967 kubelet[2491]: I1002 21:49:21.553160 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-cgroup\") pod \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " Oct 2 21:49:21.555967 kubelet[2491]: I1002 21:49:21.553208 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-kvgpz\" (UniqueName: \"kubernetes.io/projected/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-kube-api-access-kvgpz\") pod \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " Oct 2 21:49:21.555967 kubelet[2491]: I1002 21:49:21.553232 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-ipsec-secrets\") pod \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " Oct 2 21:49:21.555967 kubelet[2491]: I1002 21:49:21.553250 2491 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-hubble-tls\") pod \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\" (UID: \"6a92f1db-3691-483f-93aa-3ba3b4c0eeb8\") " Oct 2 21:49:21.555967 kubelet[2491]: I1002 21:49:21.553290 2491 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-host-proc-sys-net\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:49:21.556103 kubelet[2491]: I1002 21:49:21.553302 2491 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-xtables-lock\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:49:21.556103 kubelet[2491]: I1002 21:49:21.553311 2491 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-hostproc\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:49:21.556103 kubelet[2491]: I1002 21:49:21.553320 2491 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cni-path\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:49:21.556103 kubelet[2491]: I1002 21:49:21.553330 2491 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-etc-cni-netd\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:49:21.556103 kubelet[2491]: I1002 21:49:21.553340 2491 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-run\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:49:21.556103 kubelet[2491]: W1002 21:49:21.553585 2491 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 21:49:21.556560 kubelet[2491]: I1002 21:49:21.556532 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8" (UID: "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 21:49:21.556783 kubelet[2491]: I1002 21:49:21.556767 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8" (UID: "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:49:21.556884 kubelet[2491]: I1002 21:49:21.556871 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8" (UID: "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:49:21.556973 kubelet[2491]: I1002 21:49:21.556960 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8" (UID: "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:49:21.557443 kubelet[2491]: I1002 21:49:21.556555 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8" (UID: "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 21:49:21.561021 systemd[1]: var-lib-kubelet-pods-6a92f1db\x2d3691\x2d483f\x2d93aa\x2d3ba3b4c0eeb8-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 21:49:21.564335 systemd[1]: var-lib-kubelet-pods-6a92f1db\x2d3691\x2d483f\x2d93aa\x2d3ba3b4c0eeb8-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 21:49:21.565273 kubelet[2491]: I1002 21:49:21.565229 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8" (UID: "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:49:21.568346 kubelet[2491]: I1002 21:49:21.568309 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8" (UID: "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 21:49:21.568630 systemd[1]: var-lib-kubelet-pods-6a92f1db\x2d3691\x2d483f\x2d93aa\x2d3ba3b4c0eeb8-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dkvgpz.mount: Deactivated successfully. Oct 2 21:49:21.569701 kubelet[2491]: I1002 21:49:21.569655 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-kube-api-access-kvgpz" (OuterVolumeSpecName: "kube-api-access-kvgpz") pod "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8" (UID: "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8"). InnerVolumeSpecName "kube-api-access-kvgpz". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 21:49:21.571773 kubelet[2491]: I1002 21:49:21.571741 2491 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8" (UID: "6a92f1db-3691-483f-93aa-3ba3b4c0eeb8"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 21:49:21.653960 kubelet[2491]: I1002 21:49:21.653923 2491 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-config-path\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:49:21.653960 kubelet[2491]: I1002 21:49:21.653954 2491 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-bpf-maps\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:49:21.653960 kubelet[2491]: I1002 21:49:21.653965 2491 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-cgroup\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:49:21.653960 kubelet[2491]: I1002 21:49:21.653978 2491 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-lib-modules\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:49:21.654333 kubelet[2491]: I1002 21:49:21.653988 2491 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-kvgpz\" (UniqueName: \"kubernetes.io/projected/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-kube-api-access-kvgpz\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:49:21.654333 kubelet[2491]: I1002 21:49:21.653998 2491 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:49:21.654333 kubelet[2491]: I1002 21:49:21.654007 2491 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-hubble-tls\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:49:21.654333 kubelet[2491]: I1002 21:49:21.654017 2491 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:49:21.654333 kubelet[2491]: I1002 21:49:21.654027 2491 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8-clustermesh-secrets\") on node \"ci-3510.3.0-a-21920721f7\" DevicePath \"\"" Oct 2 21:49:21.970712 kubelet[2491]: I1002 21:49:21.970686 2491 scope.go:115] "RemoveContainer" containerID="17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f" Oct 2 21:49:21.974712 systemd[1]: Removed slice kubepods-burstable-pod6a92f1db_3691_483f_93aa_3ba3b4c0eeb8.slice. Oct 2 21:49:21.980193 env[1351]: time="2023-10-02T21:49:21.980124675Z" level=info msg="RemoveContainer for \"17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f\"" Oct 2 21:49:21.993517 env[1351]: time="2023-10-02T21:49:21.993375590Z" level=info msg="RemoveContainer for \"17a442cd83970af2dec7e626d75abf70802f34eb26a2f2a334276e529a7e116f\" returns successfully" Oct 2 21:49:22.198726 systemd[1]: var-lib-kubelet-pods-6a92f1db\x2d3691\x2d483f\x2d93aa\x2d3ba3b4c0eeb8-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 21:49:23.159132 env[1351]: time="2023-10-02T21:49:23.159031841Z" level=info msg="StopPodSandbox for \"36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7\"" Oct 2 21:49:23.159132 env[1351]: time="2023-10-02T21:49:23.159115921Z" level=info msg="TearDown network for sandbox \"36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7\" successfully" Oct 2 21:49:23.159511 env[1351]: time="2023-10-02T21:49:23.159147041Z" level=info msg="StopPodSandbox for \"36f433d2599c57aa1ee48fb472a67440634ff712d9878f679da582b0f18d1fe7\" returns successfully" Oct 2 21:49:23.160109 kubelet[2491]: I1002 21:49:23.159980 2491 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=6a92f1db-3691-483f-93aa-3ba3b4c0eeb8 path="/var/lib/kubelet/pods/6a92f1db-3691-483f-93aa-3ba3b4c0eeb8/volumes" Oct 2 21:49:25.216784 kubelet[2491]: E1002 21:49:25.216696 2491 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"