Oct 2 22:00:37.095640 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 22:00:37.095658 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 22:00:37.095666 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Oct 2 22:00:37.095673 kernel: printk: bootconsole [pl11] enabled Oct 2 22:00:37.095678 kernel: efi: EFI v2.70 by EDK II Oct 2 22:00:37.095683 kernel: efi: ACPI 2.0=0x3fd8d018 SMBIOS=0x3fd6a000 SMBIOS 3.0=0x3fd68000 MEMATTR=0x3ef30118 RNG=0x3fd8d998 MEMRESERVE=0x37eb7f98 Oct 2 22:00:37.095690 kernel: random: crng init done Oct 2 22:00:37.095695 kernel: ACPI: Early table checksum verification disabled Oct 2 22:00:37.095701 kernel: ACPI: RSDP 0x000000003FD8D018 000024 (v02 VRTUAL) Oct 2 22:00:37.095706 kernel: ACPI: XSDT 0x000000003FD8DF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:37.095712 kernel: ACPI: FACP 0x000000003FD8DC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:37.095718 kernel: ACPI: DSDT 0x000000003EBD6018 01DEC0 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 22:00:37.095724 kernel: ACPI: DBG2 0x000000003FD8DB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:37.095729 kernel: ACPI: GTDT 0x000000003FD8DD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:37.095736 kernel: ACPI: OEM0 0x000000003FD8D098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:37.095742 kernel: ACPI: SPCR 0x000000003FD8DA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:37.095748 kernel: ACPI: APIC 0x000000003FD8D818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:37.095755 kernel: ACPI: SRAT 0x000000003FD8D198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:37.095760 kernel: ACPI: PPTT 0x000000003FD8D418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Oct 2 22:00:37.095766 kernel: ACPI: BGRT 0x000000003FD8DE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:37.095772 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Oct 2 22:00:37.095778 kernel: NUMA: Failed to initialise from firmware Oct 2 22:00:37.095784 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 22:00:37.095790 kernel: NUMA: NODE_DATA [mem 0x1bf7f2900-0x1bf7f7fff] Oct 2 22:00:37.095795 kernel: Zone ranges: Oct 2 22:00:37.095801 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Oct 2 22:00:37.095807 kernel: DMA32 empty Oct 2 22:00:37.095813 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 22:00:37.095819 kernel: Movable zone start for each node Oct 2 22:00:37.095825 kernel: Early memory node ranges Oct 2 22:00:37.095830 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Oct 2 22:00:37.095836 kernel: node 0: [mem 0x0000000000824000-0x000000003ec84fff] Oct 2 22:00:37.095842 kernel: node 0: [mem 0x000000003ec85000-0x000000003ecadfff] Oct 2 22:00:37.095847 kernel: node 0: [mem 0x000000003ecae000-0x000000003fd2dfff] Oct 2 22:00:37.095853 kernel: node 0: [mem 0x000000003fd2e000-0x000000003fd81fff] Oct 2 22:00:37.095859 kernel: node 0: [mem 0x000000003fd82000-0x000000003fd8dfff] Oct 2 22:00:37.095865 kernel: node 0: [mem 0x000000003fd8e000-0x000000003fd91fff] Oct 2 22:00:37.095870 kernel: node 0: [mem 0x000000003fd92000-0x000000003fffffff] Oct 2 22:00:37.095876 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 22:00:37.095883 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 22:00:37.095891 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Oct 2 22:00:37.095897 kernel: psci: probing for conduit method from ACPI. Oct 2 22:00:37.095904 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 22:00:37.095910 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 22:00:37.095917 kernel: psci: MIGRATE_INFO_TYPE not supported. Oct 2 22:00:37.095923 kernel: psci: SMC Calling Convention v1.4 Oct 2 22:00:37.095929 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Oct 2 22:00:37.095935 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Oct 2 22:00:37.095941 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 22:00:37.095947 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 22:00:37.095953 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 22:00:37.095959 kernel: Detected PIPT I-cache on CPU0 Oct 2 22:00:37.095965 kernel: CPU features: detected: GIC system register CPU interface Oct 2 22:00:37.095971 kernel: CPU features: detected: Hardware dirty bit management Oct 2 22:00:37.095977 kernel: CPU features: detected: Spectre-BHB Oct 2 22:00:37.095983 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 22:00:37.095991 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 22:00:37.095997 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 22:00:37.096003 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Oct 2 22:00:37.096009 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Oct 2 22:00:37.096015 kernel: Policy zone: Normal Oct 2 22:00:37.096022 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 22:00:37.096029 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 22:00:37.096035 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 22:00:37.096041 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 22:00:37.096047 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 22:00:37.096055 kernel: software IO TLB: mapped [mem 0x000000003abd6000-0x000000003ebd6000] (64MB) Oct 2 22:00:37.096061 kernel: Memory: 3992064K/4194160K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 202096K reserved, 0K cma-reserved) Oct 2 22:00:37.096067 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 22:00:37.096073 kernel: trace event string verifier disabled Oct 2 22:00:37.096079 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 22:00:37.096086 kernel: rcu: RCU event tracing is enabled. Oct 2 22:00:37.096092 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 22:00:37.096098 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 22:00:37.096105 kernel: Tracing variant of Tasks RCU enabled. Oct 2 22:00:37.096111 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 22:00:37.096117 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 22:00:37.096124 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 22:00:37.096130 kernel: GICv3: 960 SPIs implemented Oct 2 22:00:37.096136 kernel: GICv3: 0 Extended SPIs implemented Oct 2 22:00:37.096142 kernel: GICv3: Distributor has no Range Selector support Oct 2 22:00:37.096148 kernel: Root IRQ handler: gic_handle_irq Oct 2 22:00:37.096155 kernel: GICv3: 16 PPIs implemented Oct 2 22:00:37.096161 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Oct 2 22:00:37.096167 kernel: ITS: No ITS available, not enabling LPIs Oct 2 22:00:37.096186 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 22:00:37.096194 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 22:00:37.096200 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 22:00:37.096206 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 22:00:37.096214 kernel: Console: colour dummy device 80x25 Oct 2 22:00:37.096221 kernel: printk: console [tty1] enabled Oct 2 22:00:37.096227 kernel: ACPI: Core revision 20210730 Oct 2 22:00:37.096234 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 22:00:37.096240 kernel: pid_max: default: 32768 minimum: 301 Oct 2 22:00:37.096249 kernel: LSM: Security Framework initializing Oct 2 22:00:37.096257 kernel: SELinux: Initializing. Oct 2 22:00:37.096264 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 22:00:37.096270 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 22:00:37.096278 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Oct 2 22:00:37.096284 kernel: Hyper-V: Host Build 10.0.22477.1341-1-0 Oct 2 22:00:37.096291 kernel: rcu: Hierarchical SRCU implementation. Oct 2 22:00:37.096297 kernel: Remapping and enabling EFI services. Oct 2 22:00:37.096306 kernel: smp: Bringing up secondary CPUs ... Oct 2 22:00:37.096312 kernel: Detected PIPT I-cache on CPU1 Oct 2 22:00:37.096319 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Oct 2 22:00:37.096325 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 22:00:37.096331 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 22:00:37.096339 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 22:00:37.096345 kernel: SMP: Total of 2 processors activated. Oct 2 22:00:37.096351 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 22:00:37.096360 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Oct 2 22:00:37.096367 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 22:00:37.096373 kernel: CPU features: detected: CRC32 instructions Oct 2 22:00:37.096379 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 22:00:37.096386 kernel: CPU features: detected: LSE atomic instructions Oct 2 22:00:37.096392 kernel: CPU features: detected: Privileged Access Never Oct 2 22:00:37.096399 kernel: CPU: All CPU(s) started at EL1 Oct 2 22:00:37.096408 kernel: alternatives: patching kernel code Oct 2 22:00:37.096419 kernel: devtmpfs: initialized Oct 2 22:00:37.096427 kernel: KASLR enabled Oct 2 22:00:37.096434 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 22:00:37.096440 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 22:00:37.096447 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 22:00:37.096454 kernel: SMBIOS 3.1.0 present. Oct 2 22:00:37.096461 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/16/2022 Oct 2 22:00:37.096467 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 22:00:37.096475 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 22:00:37.096485 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 22:00:37.096491 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 22:00:37.096498 kernel: audit: initializing netlink subsys (disabled) Oct 2 22:00:37.096505 kernel: audit: type=2000 audit(0.090:1): state=initialized audit_enabled=0 res=1 Oct 2 22:00:37.096511 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 22:00:37.096518 kernel: cpuidle: using governor menu Oct 2 22:00:37.096526 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 22:00:37.096535 kernel: ASID allocator initialised with 32768 entries Oct 2 22:00:37.096542 kernel: ACPI: bus type PCI registered Oct 2 22:00:37.096548 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 22:00:37.096555 kernel: Serial: AMBA PL011 UART driver Oct 2 22:00:37.096562 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 22:00:37.096568 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 22:00:37.096575 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 22:00:37.096584 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 22:00:37.096592 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 22:00:37.096598 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 22:00:37.096605 kernel: ACPI: Added _OSI(Module Device) Oct 2 22:00:37.096611 kernel: ACPI: Added _OSI(Processor Device) Oct 2 22:00:37.096618 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 22:00:37.096625 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 22:00:37.096634 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 22:00:37.096640 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 22:00:37.096647 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 22:00:37.096655 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 22:00:37.096661 kernel: ACPI: Interpreter enabled Oct 2 22:00:37.096668 kernel: ACPI: Using GIC for interrupt routing Oct 2 22:00:37.096675 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Oct 2 22:00:37.096681 kernel: printk: console [ttyAMA0] enabled Oct 2 22:00:37.096688 kernel: printk: bootconsole [pl11] disabled Oct 2 22:00:37.096697 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Oct 2 22:00:37.096704 kernel: iommu: Default domain type: Translated Oct 2 22:00:37.096710 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 22:00:37.096718 kernel: vgaarb: loaded Oct 2 22:00:37.096724 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 22:00:37.096731 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 22:00:37.096738 kernel: PTP clock support registered Oct 2 22:00:37.096744 kernel: Registered efivars operations Oct 2 22:00:37.096751 kernel: No ACPI PMU IRQ for CPU0 Oct 2 22:00:37.096758 kernel: No ACPI PMU IRQ for CPU1 Oct 2 22:00:37.096764 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 22:00:37.096773 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 22:00:37.096781 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 22:00:37.096788 kernel: pnp: PnP ACPI init Oct 2 22:00:37.096795 kernel: pnp: PnP ACPI: found 0 devices Oct 2 22:00:37.096801 kernel: NET: Registered PF_INET protocol family Oct 2 22:00:37.096808 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 22:00:37.096815 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 22:00:37.096821 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 22:00:37.096828 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 22:00:37.096837 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 22:00:37.096845 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 22:00:37.096852 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 22:00:37.096858 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 22:00:37.096865 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 22:00:37.096872 kernel: PCI: CLS 0 bytes, default 64 Oct 2 22:00:37.096878 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Oct 2 22:00:37.096887 kernel: kvm [1]: HYP mode not available Oct 2 22:00:37.096894 kernel: Initialise system trusted keyrings Oct 2 22:00:37.096901 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 22:00:37.096909 kernel: Key type asymmetric registered Oct 2 22:00:37.096915 kernel: Asymmetric key parser 'x509' registered Oct 2 22:00:37.096922 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 22:00:37.096928 kernel: io scheduler mq-deadline registered Oct 2 22:00:37.096935 kernel: io scheduler kyber registered Oct 2 22:00:37.096944 kernel: io scheduler bfq registered Oct 2 22:00:37.096951 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 22:00:37.096957 kernel: thunder_xcv, ver 1.0 Oct 2 22:00:37.096964 kernel: thunder_bgx, ver 1.0 Oct 2 22:00:37.096972 kernel: nicpf, ver 1.0 Oct 2 22:00:37.096978 kernel: nicvf, ver 1.0 Oct 2 22:00:37.097156 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 22:00:37.097257 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T22:00:36 UTC (1696284036) Oct 2 22:00:37.097268 kernel: efifb: probing for efifb Oct 2 22:00:37.097275 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 22:00:37.097282 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 22:00:37.097292 kernel: efifb: scrolling: redraw Oct 2 22:00:37.097302 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 22:00:37.097309 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 22:00:37.097315 kernel: fb0: EFI VGA frame buffer device Oct 2 22:00:37.097322 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Oct 2 22:00:37.097329 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 22:00:37.097335 kernel: NET: Registered PF_INET6 protocol family Oct 2 22:00:37.097342 kernel: Segment Routing with IPv6 Oct 2 22:00:37.097348 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 22:00:37.097355 kernel: NET: Registered PF_PACKET protocol family Oct 2 22:00:37.097366 kernel: Key type dns_resolver registered Oct 2 22:00:37.097372 kernel: registered taskstats version 1 Oct 2 22:00:37.097379 kernel: Loading compiled-in X.509 certificates Oct 2 22:00:37.097386 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 22:00:37.097392 kernel: Key type .fscrypt registered Oct 2 22:00:37.097399 kernel: Key type fscrypt-provisioning registered Oct 2 22:00:37.097406 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 22:00:37.097412 kernel: ima: Allocated hash algorithm: sha1 Oct 2 22:00:37.097419 kernel: ima: No architecture policies found Oct 2 22:00:37.097429 kernel: Freeing unused kernel memory: 34560K Oct 2 22:00:37.097436 kernel: Run /init as init process Oct 2 22:00:37.097442 kernel: with arguments: Oct 2 22:00:37.097449 kernel: /init Oct 2 22:00:37.097455 kernel: with environment: Oct 2 22:00:37.097461 kernel: HOME=/ Oct 2 22:00:37.097470 kernel: TERM=linux Oct 2 22:00:37.097477 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 22:00:37.097486 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 22:00:37.097496 systemd[1]: Detected virtualization microsoft. Oct 2 22:00:37.097504 systemd[1]: Detected architecture arm64. Oct 2 22:00:37.097511 systemd[1]: Running in initrd. Oct 2 22:00:37.097520 systemd[1]: No hostname configured, using default hostname. Oct 2 22:00:37.097527 systemd[1]: Hostname set to . Oct 2 22:00:37.097535 systemd[1]: Initializing machine ID from random generator. Oct 2 22:00:37.097542 systemd[1]: Queued start job for default target initrd.target. Oct 2 22:00:37.097550 systemd[1]: Started systemd-ask-password-console.path. Oct 2 22:00:37.097558 systemd[1]: Reached target cryptsetup.target. Oct 2 22:00:37.097565 systemd[1]: Reached target paths.target. Oct 2 22:00:37.097572 systemd[1]: Reached target slices.target. Oct 2 22:00:37.097585 systemd[1]: Reached target swap.target. Oct 2 22:00:37.097592 systemd[1]: Reached target timers.target. Oct 2 22:00:37.097600 systemd[1]: Listening on iscsid.socket. Oct 2 22:00:37.097607 systemd[1]: Listening on iscsiuio.socket. Oct 2 22:00:37.097615 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 22:00:37.097622 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 22:00:37.097629 systemd[1]: Listening on systemd-journald.socket. Oct 2 22:00:37.097637 systemd[1]: Listening on systemd-networkd.socket. Oct 2 22:00:37.097644 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 22:00:37.097651 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 22:00:37.097658 systemd[1]: Reached target sockets.target. Oct 2 22:00:37.097665 systemd[1]: Starting kmod-static-nodes.service... Oct 2 22:00:37.097672 systemd[1]: Finished network-cleanup.service. Oct 2 22:00:37.097680 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 22:00:37.097688 systemd[1]: Starting systemd-journald.service... Oct 2 22:00:37.097695 systemd[1]: Starting systemd-modules-load.service... Oct 2 22:00:37.097702 systemd[1]: Starting systemd-resolved.service... Oct 2 22:00:37.097709 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 22:00:37.097720 systemd-journald[276]: Journal started Oct 2 22:00:37.097758 systemd-journald[276]: Runtime Journal (/run/log/journal/93c6c11cc08d490e80c354abcbc81734) is 8.0M, max 78.6M, 70.6M free. Oct 2 22:00:37.082888 systemd-modules-load[277]: Inserted module 'overlay' Oct 2 22:00:37.117190 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 22:00:37.125188 kernel: Bridge firewalling registered Oct 2 22:00:37.125220 systemd[1]: Started systemd-journald.service. Oct 2 22:00:37.125294 systemd-modules-load[277]: Inserted module 'br_netfilter' Oct 2 22:00:37.179899 kernel: SCSI subsystem initialized Oct 2 22:00:37.179919 kernel: audit: type=1130 audit(1696284037.144:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.179930 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 22:00:37.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.163604 systemd-resolved[278]: Positive Trust Anchors: Oct 2 22:00:37.213893 kernel: device-mapper: uevent: version 1.0.3 Oct 2 22:00:37.213910 kernel: audit: type=1130 audit(1696284037.187:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.213920 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 22:00:37.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.163611 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 22:00:37.242251 kernel: audit: type=1130 audit(1696284037.217:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.163637 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 22:00:37.326426 kernel: audit: type=1130 audit(1696284037.246:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.326448 kernel: audit: type=1130 audit(1696284037.298:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.165535 systemd[1]: Finished kmod-static-nodes.service. Oct 2 22:00:37.166964 systemd-resolved[278]: Defaulting to hostname 'linux'. Oct 2 22:00:37.204234 systemd[1]: Started systemd-resolved.service. Oct 2 22:00:37.218312 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 22:00:37.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.246680 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 22:00:37.415452 kernel: audit: type=1130 audit(1696284037.356:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.415475 kernel: audit: type=1130 audit(1696284037.398:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.297895 systemd-modules-load[277]: Inserted module 'dm_multipath' Oct 2 22:00:37.299250 systemd[1]: Reached target nss-lookup.target. Oct 2 22:00:37.336559 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 22:00:37.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.341405 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 22:00:37.464319 kernel: audit: type=1130 audit(1696284037.436:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.351018 systemd[1]: Finished systemd-modules-load.service. Oct 2 22:00:37.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.358128 systemd[1]: Starting systemd-sysctl.service... Oct 2 22:00:37.496604 kernel: audit: type=1130 audit(1696284037.459:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.386947 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 22:00:37.501723 dracut-cmdline[299]: dracut-dracut-053 Oct 2 22:00:37.417267 systemd[1]: Finished systemd-sysctl.service. Oct 2 22:00:37.510429 dracut-cmdline[299]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 22:00:37.436989 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 22:00:37.460138 systemd[1]: Starting dracut-cmdline.service... Oct 2 22:00:37.616202 kernel: Loading iSCSI transport class v2.0-870. Oct 2 22:00:37.627198 kernel: iscsi: registered transport (tcp) Oct 2 22:00:37.647776 kernel: iscsi: registered transport (qla4xxx) Oct 2 22:00:37.647818 kernel: QLogic iSCSI HBA Driver Oct 2 22:00:37.733968 systemd[1]: Finished dracut-cmdline.service. Oct 2 22:00:37.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:37.739537 systemd[1]: Starting dracut-pre-udev.service... Oct 2 22:00:37.805209 kernel: raid6: neonx8 gen() 13832 MB/s Oct 2 22:00:37.825196 kernel: raid6: neonx8 xor() 10844 MB/s Oct 2 22:00:37.845208 kernel: raid6: neonx4 gen() 13586 MB/s Oct 2 22:00:37.865203 kernel: raid6: neonx4 xor() 11114 MB/s Oct 2 22:00:37.886208 kernel: raid6: neonx2 gen() 12944 MB/s Oct 2 22:00:37.906202 kernel: raid6: neonx2 xor() 10258 MB/s Oct 2 22:00:37.926192 kernel: raid6: neonx1 gen() 10513 MB/s Oct 2 22:00:37.947212 kernel: raid6: neonx1 xor() 8804 MB/s Oct 2 22:00:37.967204 kernel: raid6: int64x8 gen() 6297 MB/s Oct 2 22:00:37.987203 kernel: raid6: int64x8 xor() 3546 MB/s Oct 2 22:00:38.008194 kernel: raid6: int64x4 gen() 7274 MB/s Oct 2 22:00:38.029188 kernel: raid6: int64x4 xor() 3856 MB/s Oct 2 22:00:38.050184 kernel: raid6: int64x2 gen() 6156 MB/s Oct 2 22:00:38.072186 kernel: raid6: int64x2 xor() 3320 MB/s Oct 2 22:00:38.093183 kernel: raid6: int64x1 gen() 5041 MB/s Oct 2 22:00:38.117598 kernel: raid6: int64x1 xor() 2647 MB/s Oct 2 22:00:38.117616 kernel: raid6: using algorithm neonx8 gen() 13832 MB/s Oct 2 22:00:38.117632 kernel: raid6: .... xor() 10844 MB/s, rmw enabled Oct 2 22:00:38.123119 kernel: raid6: using neon recovery algorithm Oct 2 22:00:38.140194 kernel: xor: measuring software checksum speed Oct 2 22:00:38.148700 kernel: 8regs : 17297 MB/sec Oct 2 22:00:38.148710 kernel: 32regs : 20755 MB/sec Oct 2 22:00:38.153053 kernel: arm64_neon : 28006 MB/sec Oct 2 22:00:38.153062 kernel: xor: using function: arm64_neon (28006 MB/sec) Oct 2 22:00:38.213192 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 22:00:38.230168 systemd[1]: Finished dracut-pre-udev.service. Oct 2 22:00:38.234000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:38.238000 audit: BPF prog-id=7 op=LOAD Oct 2 22:00:38.238000 audit: BPF prog-id=8 op=LOAD Oct 2 22:00:38.238891 systemd[1]: Starting systemd-udevd.service... Oct 2 22:00:38.259663 systemd-udevd[475]: Using default interface naming scheme 'v252'. Oct 2 22:00:38.267264 systemd[1]: Started systemd-udevd.service. Oct 2 22:00:38.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:38.277552 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 22:00:38.305427 dracut-pre-trigger[496]: rd.md=0: removing MD RAID activation Oct 2 22:00:38.359078 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 22:00:38.363000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:38.364576 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 22:00:38.406403 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 22:00:38.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:38.461448 kernel: hv_vmbus: Vmbus version:5.3 Oct 2 22:00:38.491199 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 22:00:38.491250 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 22:00:38.491260 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 22:00:38.501004 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 22:00:38.521215 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 22:00:38.521274 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 22:00:38.521284 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 22:00:38.531039 kernel: scsi host0: storvsc_host_t Oct 2 22:00:38.531111 kernel: scsi host1: storvsc_host_t Oct 2 22:00:38.541230 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 22:00:38.548274 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 22:00:38.568744 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 22:00:38.568957 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 22:00:38.580065 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 22:00:38.580254 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 22:00:38.580346 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 22:00:38.584556 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 22:00:38.591681 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 22:00:38.591811 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 22:00:38.598198 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 22:00:38.603200 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 22:00:38.665205 kernel: hv_netvsc 000d3ac5-526d-000d-3ac5-526d000d3ac5 eth0: VF slot 1 added Oct 2 22:00:38.681870 kernel: hv_vmbus: registering driver hv_pci Oct 2 22:00:38.681923 kernel: hv_pci c90f2b30-c74b-4987-b2b5-264d9eacf1e7: PCI VMBus probing: Using version 0x10004 Oct 2 22:00:38.699329 kernel: hv_pci c90f2b30-c74b-4987-b2b5-264d9eacf1e7: PCI host bridge to bus c74b:00 Oct 2 22:00:38.699511 kernel: pci_bus c74b:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Oct 2 22:00:38.705988 kernel: pci_bus c74b:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 22:00:38.876268 kernel: pci c74b:00:02.0: [15b3:1018] type 00 class 0x020000 Oct 2 22:00:38.888458 kernel: pci c74b:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 22:00:38.909202 kernel: pci c74b:00:02.0: enabling Extended Tags Oct 2 22:00:38.933045 kernel: pci c74b:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at c74b:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Oct 2 22:00:38.933298 kernel: pci_bus c74b:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 22:00:38.933387 kernel: pci c74b:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 22:00:38.979196 kernel: mlx5_core c74b:00:02.0: firmware version: 16.31.2424 Oct 2 22:00:39.151191 kernel: mlx5_core c74b:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Oct 2 22:00:39.198394 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 22:00:39.231191 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (529) Oct 2 22:00:39.250822 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 22:00:39.313743 kernel: hv_netvsc 000d3ac5-526d-000d-3ac5-526d000d3ac5 eth0: VF registering: eth1 Oct 2 22:00:39.313921 kernel: mlx5_core c74b:00:02.0 eth1: joined to eth0 Oct 2 22:00:39.328196 kernel: mlx5_core c74b:00:02.0 enP51019s1: renamed from eth1 Oct 2 22:00:39.443910 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 22:00:39.487430 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 22:00:39.493669 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 22:00:39.506317 systemd[1]: Starting disk-uuid.service... Oct 2 22:00:40.543791 disk-uuid[601]: The operation has completed successfully. Oct 2 22:00:40.549884 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 22:00:40.630271 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 22:00:40.631311 systemd[1]: Finished disk-uuid.service. Oct 2 22:00:40.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:40.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:40.641280 systemd[1]: Starting verity-setup.service... Oct 2 22:00:40.693196 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 22:00:40.979439 systemd[1]: Found device dev-mapper-usr.device. Oct 2 22:00:40.985762 systemd[1]: Mounting sysusr-usr.mount... Oct 2 22:00:41.002616 systemd[1]: Finished verity-setup.service. Oct 2 22:00:41.033960 kernel: kauditd_printk_skb: 9 callbacks suppressed Oct 2 22:00:41.033984 kernel: audit: type=1130 audit(1696284041.006:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.074201 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 22:00:41.074440 systemd[1]: Mounted sysusr-usr.mount. Oct 2 22:00:41.078702 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 22:00:41.079449 systemd[1]: Starting ignition-setup.service... Oct 2 22:00:41.090159 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 22:00:41.135265 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 22:00:41.135316 kernel: BTRFS info (device sda6): using free space tree Oct 2 22:00:41.141291 kernel: BTRFS info (device sda6): has skinny extents Oct 2 22:00:41.260828 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 22:00:41.295126 kernel: audit: type=1130 audit(1696284041.265:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.295149 kernel: audit: type=1334 audit(1696284041.275:22): prog-id=9 op=LOAD Oct 2 22:00:41.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.275000 audit: BPF prog-id=9 op=LOAD Oct 2 22:00:41.276679 systemd[1]: Starting systemd-networkd.service... Oct 2 22:00:41.305837 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 22:00:41.321228 systemd-networkd[874]: lo: Link UP Oct 2 22:00:41.321238 systemd-networkd[874]: lo: Gained carrier Oct 2 22:00:41.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.321632 systemd-networkd[874]: Enumeration completed Oct 2 22:00:41.361370 kernel: audit: type=1130 audit(1696284041.329:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.322387 systemd-networkd[874]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 22:00:41.325299 systemd[1]: Started systemd-networkd.service. Oct 2 22:00:41.350334 systemd[1]: Reached target network.target. Oct 2 22:00:41.380000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.359861 systemd[1]: Starting iscsiuio.service... Oct 2 22:00:41.409778 kernel: audit: type=1130 audit(1696284041.380:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.409801 iscsid[880]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 22:00:41.409801 iscsid[880]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 22:00:41.409801 iscsid[880]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 22:00:41.409801 iscsid[880]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 22:00:41.409801 iscsid[880]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 22:00:41.409801 iscsid[880]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 22:00:41.409801 iscsid[880]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 22:00:41.511563 kernel: audit: type=1130 audit(1696284041.413:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.511591 kernel: mlx5_core c74b:00:02.0 enP51019s1: Link up Oct 2 22:00:41.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.372651 systemd[1]: Started iscsiuio.service. Oct 2 22:00:41.384838 systemd[1]: Starting iscsid.service... Oct 2 22:00:41.542220 kernel: audit: type=1130 audit(1696284041.519:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.406099 systemd[1]: Started iscsid.service. Oct 2 22:00:41.414580 systemd[1]: Starting dracut-initqueue.service... Oct 2 22:00:41.578934 kernel: hv_netvsc 000d3ac5-526d-000d-3ac5-526d000d3ac5 eth0: Data path switched to VF: enP51019s1 Oct 2 22:00:41.506560 systemd[1]: Finished dracut-initqueue.service. Oct 2 22:00:41.597648 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 22:00:41.520266 systemd[1]: Reached target remote-fs-pre.target. Oct 2 22:00:41.547460 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 22:00:41.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.556543 systemd[1]: Reached target remote-fs.target. Oct 2 22:00:41.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.574882 systemd[1]: Starting dracut-pre-mount.service... Oct 2 22:00:41.653100 kernel: audit: type=1130 audit(1696284041.602:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.653121 kernel: audit: type=1130 audit(1696284041.628:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:41.583523 systemd[1]: Finished ignition-setup.service. Oct 2 22:00:41.589100 systemd-networkd[874]: enP51019s1: Link UP Oct 2 22:00:41.589322 systemd-networkd[874]: eth0: Link UP Oct 2 22:00:41.589739 systemd-networkd[874]: eth0: Gained carrier Oct 2 22:00:41.598345 systemd-networkd[874]: enP51019s1: Gained carrier Oct 2 22:00:41.602785 systemd[1]: Finished dracut-pre-mount.service. Oct 2 22:00:41.632373 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 22:00:41.632834 systemd-networkd[874]: eth0: DHCPv4 address 10.200.20.19/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 22:00:43.039295 systemd-networkd[874]: eth0: Gained IPv6LL Oct 2 22:00:45.355114 ignition[895]: Ignition 2.14.0 Oct 2 22:00:45.355127 ignition[895]: Stage: fetch-offline Oct 2 22:00:45.355209 ignition[895]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 22:00:45.355234 ignition[895]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 22:00:45.426759 ignition[895]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 22:00:45.426931 ignition[895]: parsed url from cmdline: "" Oct 2 22:00:45.426935 ignition[895]: no config URL provided Oct 2 22:00:45.426940 ignition[895]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 22:00:45.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:45.433841 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 22:00:45.426948 ignition[895]: no config at "/usr/lib/ignition/user.ign" Oct 2 22:00:45.483505 kernel: audit: type=1130 audit(1696284045.442:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:45.443984 systemd[1]: Starting ignition-fetch.service... Oct 2 22:00:45.426953 ignition[895]: failed to fetch config: resource requires networking Oct 2 22:00:45.427259 ignition[895]: Ignition finished successfully Oct 2 22:00:45.474396 ignition[901]: Ignition 2.14.0 Oct 2 22:00:45.474402 ignition[901]: Stage: fetch Oct 2 22:00:45.474514 ignition[901]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 22:00:45.474538 ignition[901]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 22:00:45.492477 ignition[901]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 22:00:45.492664 ignition[901]: parsed url from cmdline: "" Oct 2 22:00:45.492667 ignition[901]: no config URL provided Oct 2 22:00:45.492674 ignition[901]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 22:00:45.492687 ignition[901]: no config at "/usr/lib/ignition/user.ign" Oct 2 22:00:45.492715 ignition[901]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 22:00:45.516818 ignition[901]: GET result: OK Oct 2 22:00:45.516838 ignition[901]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 22:00:45.567637 ignition[901]: opening config device: "/dev/sr0" Oct 2 22:00:45.567957 ignition[901]: getting drive status for "/dev/sr0" Oct 2 22:00:45.568041 ignition[901]: drive status: OK Oct 2 22:00:45.568085 ignition[901]: mounting config device Oct 2 22:00:45.568139 ignition[901]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure2394760435" Oct 2 22:00:45.593242 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 22:00:45.593735 ignition[901]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure2394760435" Oct 2 22:00:45.593750 ignition[901]: checking for config drive Oct 2 22:00:45.594815 systemd[1]: tmp-ignition\x2dazure2394760435.mount: Deactivated successfully. Oct 2 22:00:45.594116 ignition[901]: reading config Oct 2 22:00:45.594517 ignition[901]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure2394760435" Oct 2 22:00:45.600664 ignition[901]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure2394760435" Oct 2 22:00:45.600697 ignition[901]: config has been read from custom data Oct 2 22:00:45.600789 ignition[901]: parsing config with SHA512: ac2e634e8247711aca21cde20ed33da1f06660d82b55128d3db15277d66e12a1b0c2d35cb66e8e8ce2999f6d67dd22e3958f0490733ca5b79da665dae9ef38ab Oct 2 22:00:45.631394 unknown[901]: fetched base config from "system" Oct 2 22:00:45.631409 unknown[901]: fetched base config from "system" Oct 2 22:00:45.631927 ignition[901]: fetch: fetch complete Oct 2 22:00:45.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:45.631415 unknown[901]: fetched user config from "azure" Oct 2 22:00:45.631931 ignition[901]: fetch: fetch passed Oct 2 22:00:45.636805 systemd[1]: Finished ignition-fetch.service. Oct 2 22:00:45.631973 ignition[901]: Ignition finished successfully Oct 2 22:00:45.646050 systemd[1]: Starting ignition-kargs.service... Oct 2 22:00:45.671920 ignition[909]: Ignition 2.14.0 Oct 2 22:00:45.671927 ignition[909]: Stage: kargs Oct 2 22:00:45.672043 ignition[909]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 22:00:45.672061 ignition[909]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 22:00:45.696917 ignition[909]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 22:00:45.698303 ignition[909]: kargs: kargs passed Oct 2 22:00:45.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:45.703825 systemd[1]: Finished ignition-kargs.service. Oct 2 22:00:45.698351 ignition[909]: Ignition finished successfully Oct 2 22:00:45.709458 systemd[1]: Starting ignition-disks.service... Oct 2 22:00:45.729738 ignition[915]: Ignition 2.14.0 Oct 2 22:00:45.729748 ignition[915]: Stage: disks Oct 2 22:00:45.729852 ignition[915]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 22:00:45.729869 ignition[915]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 22:00:45.743314 systemd[1]: Finished ignition-disks.service. Oct 2 22:00:45.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:45.740244 ignition[915]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 22:00:45.749868 systemd[1]: Reached target initrd-root-device.target. Oct 2 22:00:45.741635 ignition[915]: disks: disks passed Oct 2 22:00:45.759050 systemd[1]: Reached target local-fs-pre.target. Oct 2 22:00:45.741681 ignition[915]: Ignition finished successfully Oct 2 22:00:45.769338 systemd[1]: Reached target local-fs.target. Oct 2 22:00:45.778285 systemd[1]: Reached target sysinit.target. Oct 2 22:00:45.785830 systemd[1]: Reached target basic.target. Oct 2 22:00:45.795302 systemd[1]: Starting systemd-fsck-root.service... Oct 2 22:00:45.909794 systemd-fsck[923]: ROOT: clean, 603/7326000 files, 481067/7359488 blocks Oct 2 22:00:45.922220 systemd[1]: Finished systemd-fsck-root.service. Oct 2 22:00:45.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:45.931021 systemd[1]: Mounting sysroot.mount... Oct 2 22:00:45.956188 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 22:00:45.956459 systemd[1]: Mounted sysroot.mount. Oct 2 22:00:45.960364 systemd[1]: Reached target initrd-root-fs.target. Oct 2 22:00:46.024386 systemd[1]: Mounting sysroot-usr.mount... Oct 2 22:00:46.029417 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 22:00:46.038452 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 22:00:46.038484 systemd[1]: Reached target ignition-diskful.target. Oct 2 22:00:46.044494 systemd[1]: Mounted sysroot-usr.mount. Oct 2 22:00:46.090302 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 22:00:46.095702 systemd[1]: Starting initrd-setup-root.service... Oct 2 22:00:46.120197 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (933) Oct 2 22:00:46.132193 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 22:00:46.132225 kernel: BTRFS info (device sda6): using free space tree Oct 2 22:00:46.137165 kernel: BTRFS info (device sda6): has skinny extents Oct 2 22:00:46.137192 initrd-setup-root[938]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 22:00:46.148167 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 22:00:46.176203 initrd-setup-root[964]: cut: /sysroot/etc/group: No such file or directory Oct 2 22:00:46.190216 initrd-setup-root[972]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 22:00:46.204147 initrd-setup-root[980]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 22:00:46.825592 systemd[1]: Finished initrd-setup-root.service. Oct 2 22:00:46.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:46.844456 kernel: kauditd_printk_skb: 4 callbacks suppressed Oct 2 22:00:46.844511 kernel: audit: type=1130 audit(1696284046.830:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:46.840035 systemd[1]: Starting ignition-mount.service... Oct 2 22:00:46.867108 systemd[1]: Starting sysroot-boot.service... Oct 2 22:00:46.876908 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 22:00:46.877042 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 22:00:46.901359 systemd[1]: Finished sysroot-boot.service. Oct 2 22:00:46.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:46.930189 kernel: audit: type=1130 audit(1696284046.906:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:46.936646 ignition[1003]: INFO : Ignition 2.14.0 Oct 2 22:00:46.936646 ignition[1003]: INFO : Stage: mount Oct 2 22:00:46.950243 ignition[1003]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 22:00:46.950243 ignition[1003]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 22:00:46.950243 ignition[1003]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 22:00:46.950243 ignition[1003]: INFO : mount: mount passed Oct 2 22:00:46.950243 ignition[1003]: INFO : Ignition finished successfully Oct 2 22:00:47.013075 kernel: audit: type=1130 audit(1696284046.952:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:46.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:46.948531 systemd[1]: Finished ignition-mount.service. Oct 2 22:00:47.555382 coreos-metadata[932]: Oct 02 22:00:47.555 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 22:00:47.565909 coreos-metadata[932]: Oct 02 22:00:47.565 INFO Fetch successful Oct 2 22:00:47.605372 coreos-metadata[932]: Oct 02 22:00:47.605 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 22:00:47.617065 coreos-metadata[932]: Oct 02 22:00:47.616 INFO Fetch successful Oct 2 22:00:47.622931 coreos-metadata[932]: Oct 02 22:00:47.622 INFO wrote hostname ci-3510.3.0-a-02d4509438 to /sysroot/etc/hostname Oct 2 22:00:47.632271 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 22:00:47.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.666131 kernel: audit: type=1130 audit(1696284047.637:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.658201 systemd[1]: Starting ignition-files.service... Oct 2 22:00:47.671411 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 22:00:47.690195 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (1012) Oct 2 22:00:47.702641 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 22:00:47.702661 kernel: BTRFS info (device sda6): using free space tree Oct 2 22:00:47.702671 kernel: BTRFS info (device sda6): has skinny extents Oct 2 22:00:47.712045 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 22:00:47.732112 ignition[1031]: INFO : Ignition 2.14.0 Oct 2 22:00:47.732112 ignition[1031]: INFO : Stage: files Oct 2 22:00:47.741561 ignition[1031]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 22:00:47.741561 ignition[1031]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 22:00:47.741561 ignition[1031]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 22:00:47.741561 ignition[1031]: DEBUG : files: compiled without relabeling support, skipping Oct 2 22:00:47.775566 ignition[1031]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 22:00:47.775566 ignition[1031]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 22:00:47.837624 ignition[1031]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 22:00:47.845539 ignition[1031]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 22:00:47.845539 ignition[1031]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 22:00:47.838017 unknown[1031]: wrote ssh authorized keys file for user: core Oct 2 22:00:47.866400 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 22:00:47.866400 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-arm64-v1.1.1.tgz: attempt #1 Oct 2 22:00:48.011468 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 22:00:48.223562 ignition[1031]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 6b5df61a53601926e4b5a9174828123d555f592165439f541bc117c68781f41c8bd30dccd52367e406d104df849bcbcfb72d9c4bafda4b045c59ce95d0ca0742 Oct 2 22:00:48.240714 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 22:00:48.240714 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 22:00:48.240714 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-arm64.tar.gz: attempt #1 Oct 2 22:00:48.415641 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 22:00:48.550995 ignition[1031]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: 4c7e4541123cbd6f1d6fec1f827395cd58d65716c0998de790f965485738b6d6257c0dc46fd7f66403166c299f6d5bf9ff30b6e1ff9afbb071f17005e834518c Oct 2 22:00:48.567747 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-arm64.tar.gz" Oct 2 22:00:48.567747 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 22:00:48.567747 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubeadm: attempt #1 Oct 2 22:00:48.690042 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 22:00:49.181171 ignition[1031]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 46c9f489062bdb84574703f7339d140d7e42c9c71b367cd860071108a3c1d38fabda2ef69f9c0ff88f7c80e88d38f96ab2248d4c9a6c9c60b0a4c20fd640d0db Oct 2 22:00:49.198075 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 22:00:49.198075 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 22:00:49.198075 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubelet: attempt #1 Oct 2 22:00:49.256523 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 22:00:49.888193 kernel: mlx5_core c74b:00:02.0: poll_health:739:(pid 1031): device's health compromised - reached miss count Oct 2 22:00:51.752406 ignition[1031]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 0e4ee1f23bf768c49d09beb13a6b5fad6efc8e3e685e7c5610188763e3af55923fb46158b5e76973a0f9a055f9b30d525b467c53415f965536adc2f04d9cf18d Oct 2 22:00:51.768974 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 22:00:51.768974 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 22:00:51.768974 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/arm64/kubectl: attempt #1 Oct 2 22:00:51.812792 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 22:00:52.653676 ignition[1031]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 3672fda0beebbbd636a2088f427463cbad32683ea4fbb1df61650552e63846b6a47db803ccb70c3db0a8f24746a23a5632bdc15a3fb78f4f7d833e7f86763c2a Oct 2 22:00:52.670716 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 22:00:52.670716 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 22:00:52.670716 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 22:00:52.670716 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 22:00:52.710641 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 22:00:52.772660 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 22:00:52.822010 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 22:00:52.832014 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 22:00:52.832014 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 22:00:52.832014 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 22:00:52.832014 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 22:00:52.832014 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 22:00:52.832014 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 22:00:52.901378 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (1036) Oct 2 22:00:52.872065 systemd[1]: mnt-oem429381716.mount: Deactivated successfully. Oct 2 22:00:52.906466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem429381716" Oct 2 22:00:52.906466 ignition[1031]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem429381716": device or resource busy Oct 2 22:00:52.906466 ignition[1031]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem429381716", trying btrfs: device or resource busy Oct 2 22:00:52.906466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem429381716" Oct 2 22:00:52.906466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem429381716" Oct 2 22:00:52.906466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem429381716" Oct 2 22:00:52.906466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem429381716" Oct 2 22:00:52.906466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 22:00:52.906466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 22:00:52.906466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 22:00:52.906466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem737471410" Oct 2 22:00:52.906466 ignition[1031]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem737471410": device or resource busy Oct 2 22:00:52.906466 ignition[1031]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem737471410", trying btrfs: device or resource busy Oct 2 22:00:52.906466 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem737471410" Oct 2 22:00:53.230277 kernel: audit: type=1130 audit(1696284052.911:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.230308 kernel: audit: type=1130 audit(1696284052.991:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.230320 kernel: audit: type=1131 audit(1696284053.020:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.230330 kernel: audit: type=1130 audit(1696284053.035:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.230341 kernel: audit: type=1130 audit(1696284053.143:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.230350 kernel: audit: type=1131 audit(1696284053.143:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:52.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:52.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.020000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.143000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:52.897928 systemd[1]: mnt-oem737471410.mount: Deactivated successfully. Oct 2 22:00:53.235997 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem737471410" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem737471410" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem737471410" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(1a): [started] setting preset to enabled for "waagent.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(1a): [finished] setting preset to enabled for "waagent.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(1b): [started] setting preset to enabled for "nvidia.service" Oct 2 22:00:53.235997 ignition[1031]: INFO : files: op(1b): [finished] setting preset to enabled for "nvidia.service" Oct 2 22:00:53.509355 kernel: audit: type=1130 audit(1696284053.270:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.509385 kernel: audit: type=1131 audit(1696284053.380:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.380000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:52.905153 systemd[1]: Finished ignition-files.service. Oct 2 22:00:53.517781 ignition[1031]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 22:00:53.517781 ignition[1031]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 22:00:53.517781 ignition[1031]: INFO : files: op(1d): [started] setting preset to enabled for "prepare-critools.service" Oct 2 22:00:53.517781 ignition[1031]: INFO : files: op(1d): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 22:00:53.517781 ignition[1031]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 22:00:53.517781 ignition[1031]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 22:00:53.517781 ignition[1031]: INFO : files: files passed Oct 2 22:00:53.517781 ignition[1031]: INFO : Ignition finished successfully Oct 2 22:00:53.644365 kernel: audit: type=1131 audit(1696284053.560:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.644387 kernel: audit: type=1131 audit(1696284053.602:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.560000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.602000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:52.939259 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 22:00:53.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.653894 initrd-setup-root-after-ignition[1056]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 22:00:52.957505 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 22:00:53.682000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.697000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.701352 iscsid[880]: iscsid shutting down. Oct 2 22:00:53.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:52.958251 systemd[1]: Starting ignition-quench.service... Oct 2 22:00:53.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:52.986523 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 22:00:53.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:52.986614 systemd[1]: Finished ignition-quench.service. Oct 2 22:00:53.020586 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 22:00:53.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.741000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.035479 systemd[1]: Reached target ignition-complete.target. Oct 2 22:00:53.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.092073 systemd[1]: Starting initrd-parse-etc.service... Oct 2 22:00:53.766948 ignition[1069]: INFO : Ignition 2.14.0 Oct 2 22:00:53.766948 ignition[1069]: INFO : Stage: umount Oct 2 22:00:53.766948 ignition[1069]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 22:00:53.766948 ignition[1069]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 22:00:53.766948 ignition[1069]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 22:00:53.766948 ignition[1069]: INFO : umount: umount passed Oct 2 22:00:53.766948 ignition[1069]: INFO : Ignition finished successfully Oct 2 22:00:53.821000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.139042 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 22:00:53.139131 systemd[1]: Finished initrd-parse-etc.service. Oct 2 22:00:53.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.143840 systemd[1]: Reached target initrd-fs.target. Oct 2 22:00:53.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.181371 systemd[1]: Reached target initrd.target. Oct 2 22:00:53.185591 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 22:00:53.186457 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 22:00:53.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.257788 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 22:00:53.305519 systemd[1]: Starting initrd-cleanup.service... Oct 2 22:00:53.328854 systemd[1]: Stopped target nss-lookup.target. Oct 2 22:00:53.337450 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 22:00:53.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.349277 systemd[1]: Stopped target timers.target. Oct 2 22:00:53.918000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.918000 audit: BPF prog-id=6 op=UNLOAD Oct 2 22:00:53.364689 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 22:00:53.364747 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 22:00:53.942000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.404646 systemd[1]: Stopped target initrd.target. Oct 2 22:00:53.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.415996 systemd[1]: Stopped target basic.target. Oct 2 22:00:53.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.431870 systemd[1]: Stopped target ignition-complete.target. Oct 2 22:00:53.448834 systemd[1]: Stopped target ignition-diskful.target. Oct 2 22:00:53.462414 systemd[1]: Stopped target initrd-root-device.target. Oct 2 22:00:53.981000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.475740 systemd[1]: Stopped target remote-fs.target. Oct 2 22:00:53.489035 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 22:00:53.501725 systemd[1]: Stopped target sysinit.target. Oct 2 22:00:54.007000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.513732 systemd[1]: Stopped target local-fs.target. Oct 2 22:00:54.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.522139 systemd[1]: Stopped target local-fs-pre.target. Oct 2 22:00:54.024000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.535424 systemd[1]: Stopped target swap.target. Oct 2 22:00:53.548037 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 22:00:53.548109 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 22:00:53.560630 systemd[1]: Stopped target cryptsetup.target. Oct 2 22:00:54.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.589436 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 22:00:54.070000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.589489 systemd[1]: Stopped dracut-initqueue.service. Oct 2 22:00:54.084995 kernel: hv_netvsc 000d3ac5-526d-000d-3ac5-526d000d3ac5 eth0: Data path switched from VF: enP51019s1 Oct 2 22:00:54.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.602663 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 22:00:54.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:54.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.602703 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 22:00:53.632165 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 22:00:53.632215 systemd[1]: Stopped ignition-files.service. Oct 2 22:00:53.640043 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 22:00:53.640078 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 22:00:53.649503 systemd[1]: Stopping ignition-mount.service... Oct 2 22:00:53.658901 systemd[1]: Stopping iscsid.service... Oct 2 22:00:53.665334 systemd[1]: Stopping sysroot-boot.service... Oct 2 22:00:53.677452 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 22:00:53.677516 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 22:00:53.692831 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 22:00:53.692904 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 22:00:53.697758 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 22:00:53.697868 systemd[1]: Stopped iscsid.service. Oct 2 22:00:53.704887 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 22:00:53.704968 systemd[1]: Finished initrd-cleanup.service. Oct 2 22:00:53.713465 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 22:00:53.713544 systemd[1]: Stopped ignition-mount.service. Oct 2 22:00:53.724053 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 22:00:53.724098 systemd[1]: Stopped ignition-disks.service. Oct 2 22:00:53.732272 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 22:00:53.732331 systemd[1]: Stopped ignition-kargs.service. Oct 2 22:00:53.737258 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 22:00:54.201000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.737299 systemd[1]: Stopped ignition-fetch.service. Oct 2 22:00:53.741651 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 22:00:53.741690 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 22:00:53.752660 systemd[1]: Stopped target paths.target. Oct 2 22:00:53.760896 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 22:00:53.771371 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 22:00:53.776472 systemd[1]: Stopped target slices.target. Oct 2 22:00:53.784093 systemd[1]: Stopped target sockets.target. Oct 2 22:00:53.795220 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 22:00:53.795272 systemd[1]: Closed iscsid.socket. Oct 2 22:00:53.811289 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 22:00:53.811337 systemd[1]: Stopped ignition-setup.service. Oct 2 22:00:53.821796 systemd[1]: Stopping iscsiuio.service... Oct 2 22:00:54.280307 systemd-journald[276]: Received SIGTERM from PID 1 (n/a). Oct 2 22:00:53.835721 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 22:00:53.836233 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 22:00:53.836328 systemd[1]: Stopped iscsiuio.service. Oct 2 22:00:53.844200 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 22:00:53.844292 systemd[1]: Stopped sysroot-boot.service. Oct 2 22:00:53.852612 systemd[1]: Stopped target network.target. Oct 2 22:00:53.860907 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 22:00:53.860939 systemd[1]: Closed iscsiuio.socket. Oct 2 22:00:53.868304 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 22:00:53.868344 systemd[1]: Stopped initrd-setup-root.service. Oct 2 22:00:53.879809 systemd[1]: Stopping systemd-networkd.service... Oct 2 22:00:53.888047 systemd[1]: Stopping systemd-resolved.service... Oct 2 22:00:53.900080 systemd-networkd[874]: eth0: DHCPv6 lease lost Oct 2 22:00:54.280000 audit: BPF prog-id=9 op=UNLOAD Oct 2 22:00:53.904602 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 22:00:53.904689 systemd[1]: Stopped systemd-networkd.service. Oct 2 22:00:53.910716 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 22:00:53.910835 systemd[1]: Stopped systemd-resolved.service. Oct 2 22:00:53.919651 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 22:00:53.919688 systemd[1]: Closed systemd-networkd.socket. Oct 2 22:00:53.927982 systemd[1]: Stopping network-cleanup.service... Oct 2 22:00:53.937587 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 22:00:53.937645 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 22:00:53.942576 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 22:00:53.942627 systemd[1]: Stopped systemd-sysctl.service. Oct 2 22:00:53.954467 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 22:00:53.954504 systemd[1]: Stopped systemd-modules-load.service. Oct 2 22:00:53.959383 systemd[1]: Stopping systemd-udevd.service... Oct 2 22:00:53.967792 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 22:00:53.972517 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 22:00:53.972684 systemd[1]: Stopped systemd-udevd.service. Oct 2 22:00:53.981676 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 22:00:53.981739 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 22:00:53.991124 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 22:00:53.991169 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 22:00:53.999776 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 22:00:53.999835 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 22:00:54.008272 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 22:00:54.008314 systemd[1]: Stopped dracut-cmdline.service. Oct 2 22:00:54.016493 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 22:00:54.016531 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 22:00:54.028954 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 22:00:54.043966 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 22:00:54.044022 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 22:00:54.057349 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 22:00:54.057396 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 22:00:54.071130 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 22:00:54.071200 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 22:00:54.082027 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 22:00:54.082512 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 22:00:54.082608 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 22:00:54.193629 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 22:00:54.193737 systemd[1]: Stopped network-cleanup.service. Oct 2 22:00:54.201690 systemd[1]: Reached target initrd-switch-root.target. Oct 2 22:00:54.212517 systemd[1]: Starting initrd-switch-root.service... Oct 2 22:00:54.230572 systemd[1]: Switching root. Oct 2 22:00:54.281730 systemd-journald[276]: Journal stopped Oct 2 22:01:06.880838 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 22:01:06.880858 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 22:01:06.880868 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 22:01:06.880878 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 22:01:06.880886 kernel: SELinux: policy capability open_perms=1 Oct 2 22:01:06.880893 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 22:01:06.880902 kernel: SELinux: policy capability always_check_network=0 Oct 2 22:01:06.880910 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 22:01:06.880918 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 22:01:06.880926 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 22:01:06.880935 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 22:01:06.880944 systemd[1]: Successfully loaded SELinux policy in 269.044ms. Oct 2 22:01:06.880956 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 25.049ms. Oct 2 22:01:06.880966 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 22:01:06.880978 systemd[1]: Detected virtualization microsoft. Oct 2 22:01:06.880986 systemd[1]: Detected architecture arm64. Oct 2 22:01:06.880995 systemd[1]: Detected first boot. Oct 2 22:01:06.881004 systemd[1]: Hostname set to . Oct 2 22:01:06.881013 systemd[1]: Initializing machine ID from random generator. Oct 2 22:01:06.881022 systemd[1]: Populated /etc with preset unit settings. Oct 2 22:01:06.881031 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 22:01:06.881041 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 22:01:06.881053 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 22:01:06.881063 kernel: kauditd_printk_skb: 41 callbacks suppressed Oct 2 22:01:06.881071 kernel: audit: type=1334 audit(1696284066.137:89): prog-id=12 op=LOAD Oct 2 22:01:06.881079 kernel: audit: type=1334 audit(1696284066.137:90): prog-id=3 op=UNLOAD Oct 2 22:01:06.881088 kernel: audit: type=1334 audit(1696284066.137:91): prog-id=13 op=LOAD Oct 2 22:01:06.881096 kernel: audit: type=1334 audit(1696284066.137:92): prog-id=14 op=LOAD Oct 2 22:01:06.881104 kernel: audit: type=1334 audit(1696284066.137:93): prog-id=4 op=UNLOAD Oct 2 22:01:06.881113 kernel: audit: type=1334 audit(1696284066.137:94): prog-id=5 op=UNLOAD Oct 2 22:01:06.881123 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 22:01:06.881131 kernel: audit: type=1334 audit(1696284066.143:95): prog-id=15 op=LOAD Oct 2 22:01:06.881140 systemd[1]: Stopped initrd-switch-root.service. Oct 2 22:01:06.881150 kernel: audit: type=1334 audit(1696284066.143:96): prog-id=12 op=UNLOAD Oct 2 22:01:06.881158 kernel: audit: type=1334 audit(1696284066.149:97): prog-id=16 op=LOAD Oct 2 22:01:06.881166 kernel: audit: type=1334 audit(1696284066.155:98): prog-id=17 op=LOAD Oct 2 22:01:06.881189 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 22:01:06.881201 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 22:01:06.881210 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 22:01:06.881219 systemd[1]: Created slice system-getty.slice. Oct 2 22:01:06.881231 systemd[1]: Created slice system-modprobe.slice. Oct 2 22:01:06.881241 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 22:01:06.881250 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 22:01:06.881260 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 22:01:06.881269 systemd[1]: Created slice user.slice. Oct 2 22:01:06.881279 systemd[1]: Started systemd-ask-password-console.path. Oct 2 22:01:06.881289 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 22:01:06.881298 systemd[1]: Set up automount boot.automount. Oct 2 22:01:06.881307 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 22:01:06.881316 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 22:01:06.881325 systemd[1]: Stopped target initrd-fs.target. Oct 2 22:01:06.881335 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 22:01:06.881344 systemd[1]: Reached target integritysetup.target. Oct 2 22:01:06.881353 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 22:01:06.881365 systemd[1]: Reached target remote-fs.target. Oct 2 22:01:06.881375 systemd[1]: Reached target slices.target. Oct 2 22:01:06.881384 systemd[1]: Reached target swap.target. Oct 2 22:01:06.881393 systemd[1]: Reached target torcx.target. Oct 2 22:01:06.881402 systemd[1]: Reached target veritysetup.target. Oct 2 22:01:06.881411 systemd[1]: Listening on systemd-coredump.socket. Oct 2 22:01:06.881420 systemd[1]: Listening on systemd-initctl.socket. Oct 2 22:01:06.881429 systemd[1]: Listening on systemd-networkd.socket. Oct 2 22:01:06.881441 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 22:01:06.881450 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 22:01:06.881460 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 22:01:06.881469 systemd[1]: Mounting dev-hugepages.mount... Oct 2 22:01:06.881479 systemd[1]: Mounting dev-mqueue.mount... Oct 2 22:01:06.881489 systemd[1]: Mounting media.mount... Oct 2 22:01:06.881498 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 22:01:06.881507 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 22:01:06.881516 systemd[1]: Mounting tmp.mount... Oct 2 22:01:06.881526 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 22:01:06.881535 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 22:01:06.881544 systemd[1]: Starting kmod-static-nodes.service... Oct 2 22:01:06.881554 systemd[1]: Starting modprobe@configfs.service... Oct 2 22:01:06.881565 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 22:01:06.881575 systemd[1]: Starting modprobe@drm.service... Oct 2 22:01:06.881584 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 22:01:06.881594 systemd[1]: Starting modprobe@fuse.service... Oct 2 22:01:06.881603 systemd[1]: Starting modprobe@loop.service... Oct 2 22:01:06.881613 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 22:01:06.881622 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 22:01:06.881632 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 22:01:06.881641 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 22:01:06.881651 kernel: loop: module loaded Oct 2 22:01:06.881661 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 22:01:06.881670 kernel: fuse: init (API version 7.34) Oct 2 22:01:06.881679 systemd[1]: Stopped systemd-journald.service. Oct 2 22:01:06.881688 systemd[1]: systemd-journald.service: Consumed 3.198s CPU time. Oct 2 22:01:06.881697 systemd[1]: Starting systemd-journald.service... Oct 2 22:01:06.881706 systemd[1]: Starting systemd-modules-load.service... Oct 2 22:01:06.881716 systemd[1]: Starting systemd-network-generator.service... Oct 2 22:01:06.881725 systemd[1]: Starting systemd-remount-fs.service... Oct 2 22:01:06.881735 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 22:01:06.881745 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 22:01:06.881754 systemd[1]: Stopped verity-setup.service. Oct 2 22:01:06.881765 systemd[1]: Mounted dev-hugepages.mount. Oct 2 22:01:06.881774 systemd[1]: Mounted dev-mqueue.mount. Oct 2 22:01:06.881783 systemd[1]: Mounted media.mount. Oct 2 22:01:06.881792 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 22:01:06.881801 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 22:01:06.881810 systemd[1]: Mounted tmp.mount. Oct 2 22:01:06.881821 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 22:01:06.881834 systemd-journald[1196]: Journal started Oct 2 22:01:06.881870 systemd-journald[1196]: Runtime Journal (/run/log/journal/b3fcfdee9d6c402dbb54f0adb8b74552) is 8.0M, max 78.6M, 70.6M free. Oct 2 22:00:56.576000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 22:00:57.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 22:00:57.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 22:00:57.302000 audit: BPF prog-id=10 op=LOAD Oct 2 22:00:57.302000 audit: BPF prog-id=10 op=UNLOAD Oct 2 22:00:57.302000 audit: BPF prog-id=11 op=LOAD Oct 2 22:00:57.302000 audit: BPF prog-id=11 op=UNLOAD Oct 2 22:01:06.137000 audit: BPF prog-id=12 op=LOAD Oct 2 22:01:06.137000 audit: BPF prog-id=3 op=UNLOAD Oct 2 22:01:06.137000 audit: BPF prog-id=13 op=LOAD Oct 2 22:01:06.137000 audit: BPF prog-id=14 op=LOAD Oct 2 22:01:06.137000 audit: BPF prog-id=4 op=UNLOAD Oct 2 22:01:06.137000 audit: BPF prog-id=5 op=UNLOAD Oct 2 22:01:06.143000 audit: BPF prog-id=15 op=LOAD Oct 2 22:01:06.143000 audit: BPF prog-id=12 op=UNLOAD Oct 2 22:01:06.149000 audit: BPF prog-id=16 op=LOAD Oct 2 22:01:06.155000 audit: BPF prog-id=17 op=LOAD Oct 2 22:01:06.155000 audit: BPF prog-id=13 op=UNLOAD Oct 2 22:01:06.155000 audit: BPF prog-id=14 op=UNLOAD Oct 2 22:01:06.161000 audit: BPF prog-id=18 op=LOAD Oct 2 22:01:06.161000 audit: BPF prog-id=15 op=UNLOAD Oct 2 22:01:06.167000 audit: BPF prog-id=19 op=LOAD Oct 2 22:01:06.172000 audit: BPF prog-id=20 op=LOAD Oct 2 22:01:06.172000 audit: BPF prog-id=16 op=UNLOAD Oct 2 22:01:06.172000 audit: BPF prog-id=17 op=UNLOAD Oct 2 22:01:06.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.194000 audit: BPF prog-id=18 op=UNLOAD Oct 2 22:01:06.215000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.694000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.735000 audit: BPF prog-id=21 op=LOAD Oct 2 22:01:06.736000 audit: BPF prog-id=22 op=LOAD Oct 2 22:01:06.736000 audit: BPF prog-id=23 op=LOAD Oct 2 22:01:06.736000 audit: BPF prog-id=19 op=UNLOAD Oct 2 22:01:06.736000 audit: BPF prog-id=20 op=UNLOAD Oct 2 22:01:06.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.878000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 22:01:06.878000 audit[1196]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=ffffdeb72d50 a2=4000 a3=1 items=0 ppid=1 pid=1196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:01:06.878000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 22:00:58.587566 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 22:01:06.136637 systemd[1]: Queued start job for default target multi-user.target. Oct 2 22:00:58.658123 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 22:01:06.173463 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 22:00:58.658149 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 22:01:06.173830 systemd[1]: systemd-journald.service: Consumed 3.198s CPU time. Oct 2 22:00:58.658207 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 22:00:58.658217 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 22:00:58.658256 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 22:00:58.658268 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 22:00:58.658459 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 22:00:58.658488 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 22:00:58.658499 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 22:00:58.658843 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 22:00:58.658875 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 22:00:58.658893 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 22:00:58.658906 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 22:00:58.658923 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 22:00:58.658935 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:00:58Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 22:01:05.059328 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:01:05Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 22:01:05.059583 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:01:05Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 22:01:05.059673 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:01:05Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 22:01:05.059825 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:01:05Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 22:01:05.059870 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:01:05Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 22:01:05.059925 /usr/lib/systemd/system-generators/torcx-generator[1102]: time="2023-10-02T22:01:05Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 22:01:06.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.897997 systemd[1]: Started systemd-journald.service. Oct 2 22:01:06.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.898841 systemd[1]: Finished kmod-static-nodes.service. Oct 2 22:01:06.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.903628 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 22:01:06.903748 systemd[1]: Finished modprobe@configfs.service. Oct 2 22:01:06.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.908666 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 22:01:06.908779 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 22:01:06.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.913000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.913561 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 22:01:06.913675 systemd[1]: Finished modprobe@drm.service. Oct 2 22:01:06.917000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.917000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.918077 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 22:01:06.918204 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 22:01:06.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.924008 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 22:01:06.924122 systemd[1]: Finished modprobe@fuse.service. Oct 2 22:01:06.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.928000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.928919 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 22:01:06.929028 systemd[1]: Finished modprobe@loop.service. Oct 2 22:01:06.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.933000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.933684 systemd[1]: Finished systemd-network-generator.service. Oct 2 22:01:06.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.939318 systemd[1]: Finished systemd-remount-fs.service. Oct 2 22:01:06.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.944394 systemd[1]: Finished systemd-modules-load.service. Oct 2 22:01:06.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:06.949616 systemd[1]: Reached target network-pre.target. Oct 2 22:01:06.956323 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 22:01:06.961766 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 22:01:06.965894 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 22:01:07.015559 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 22:01:07.020892 systemd[1]: Starting systemd-journal-flush.service... Oct 2 22:01:07.025308 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 22:01:07.026219 systemd[1]: Starting systemd-random-seed.service... Oct 2 22:01:07.030773 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 22:01:07.031732 systemd[1]: Starting systemd-sysctl.service... Oct 2 22:01:07.037169 systemd[1]: Starting systemd-sysusers.service... Oct 2 22:01:07.043829 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 22:01:07.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:07.048918 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 22:01:07.053805 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 22:01:07.059411 systemd[1]: Starting systemd-udev-settle.service... Oct 2 22:01:07.070407 udevadm[1222]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 22:01:07.096007 systemd[1]: Finished systemd-random-seed.service. Oct 2 22:01:07.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:07.101214 systemd[1]: Reached target first-boot-complete.target. Oct 2 22:01:07.165443 systemd[1]: Finished systemd-sysctl.service. Oct 2 22:01:07.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:07.180251 systemd-journald[1196]: Time spent on flushing to /var/log/journal/b3fcfdee9d6c402dbb54f0adb8b74552 is 14.570ms for 1132 entries. Oct 2 22:01:07.180251 systemd-journald[1196]: System Journal (/var/log/journal/b3fcfdee9d6c402dbb54f0adb8b74552) is 8.0M, max 2.6G, 2.6G free. Oct 2 22:01:07.257164 systemd-journald[1196]: Received client request to flush runtime journal. Oct 2 22:01:07.258535 systemd[1]: Finished systemd-journal-flush.service. Oct 2 22:01:07.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:07.767344 systemd[1]: Finished systemd-sysusers.service. Oct 2 22:01:07.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:07.773446 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 22:01:08.166291 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 22:01:08.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:08.281427 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 22:01:08.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:08.286000 audit: BPF prog-id=24 op=LOAD Oct 2 22:01:08.286000 audit: BPF prog-id=25 op=LOAD Oct 2 22:01:08.286000 audit: BPF prog-id=7 op=UNLOAD Oct 2 22:01:08.286000 audit: BPF prog-id=8 op=UNLOAD Oct 2 22:01:08.287613 systemd[1]: Starting systemd-udevd.service... Oct 2 22:01:08.307885 systemd-udevd[1227]: Using default interface naming scheme 'v252'. Oct 2 22:01:08.663941 systemd[1]: Started systemd-udevd.service. Oct 2 22:01:08.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:08.675000 audit: BPF prog-id=26 op=LOAD Oct 2 22:01:08.676103 systemd[1]: Starting systemd-networkd.service... Oct 2 22:01:08.728960 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 22:01:08.734000 audit: BPF prog-id=27 op=LOAD Oct 2 22:01:08.735000 audit: BPF prog-id=28 op=LOAD Oct 2 22:01:08.735000 audit: BPF prog-id=29 op=LOAD Oct 2 22:01:08.736365 systemd[1]: Starting systemd-userdbd.service... Oct 2 22:01:08.815769 systemd[1]: Started systemd-userdbd.service. Oct 2 22:01:08.820196 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 22:01:08.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:08.823000 audit[1243]: AVC avc: denied { confidentiality } for pid=1243 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 22:01:08.831206 kernel: hv_vmbus: registering driver hv_balloon Oct 2 22:01:08.849034 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 22:01:08.849186 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 22:01:08.849217 kernel: hv_balloon: Memory hot add disabled on ARM64 Oct 2 22:01:08.823000 audit[1243]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaab021c3c50 a1=aa2c a2=ffffa72f24b0 a3=aaab0211e010 items=10 ppid=1227 pid=1243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:01:08.823000 audit: CWD cwd="/" Oct 2 22:01:08.823000 audit: PATH item=0 name=(null) inode=11123 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:08.823000 audit: PATH item=1 name=(null) inode=11124 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:08.823000 audit: PATH item=2 name=(null) inode=11123 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:08.823000 audit: PATH item=3 name=(null) inode=11125 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:08.823000 audit: PATH item=4 name=(null) inode=11123 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:08.823000 audit: PATH item=5 name=(null) inode=11126 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:08.823000 audit: PATH item=6 name=(null) inode=11123 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:08.823000 audit: PATH item=7 name=(null) inode=11127 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:08.823000 audit: PATH item=8 name=(null) inode=11123 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:08.823000 audit: PATH item=9 name=(null) inode=11128 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:08.823000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 22:01:08.874781 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 22:01:08.874896 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 22:01:08.883201 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 22:01:08.883282 kernel: hv_vmbus: registering driver hv_utils Oct 2 22:01:08.883308 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 22:01:08.883324 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 22:01:08.884197 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 22:01:08.514091 kernel: Console: switching to colour dummy device 80x25 Oct 2 22:01:08.563269 systemd-journald[1196]: Time jumped backwards, rotating. Oct 2 22:01:08.563343 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 22:01:08.704195 systemd-networkd[1248]: lo: Link UP Oct 2 22:01:08.704460 systemd-networkd[1248]: lo: Gained carrier Oct 2 22:01:08.704962 systemd-networkd[1248]: Enumeration completed Oct 2 22:01:08.705114 systemd[1]: Started systemd-networkd.service. Oct 2 22:01:08.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:08.711746 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 22:01:08.739640 systemd-networkd[1248]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 22:01:08.796780 kernel: mlx5_core c74b:00:02.0 enP51019s1: Link up Oct 2 22:01:08.840776 kernel: hv_netvsc 000d3ac5-526d-000d-3ac5-526d000d3ac5 eth0: Data path switched to VF: enP51019s1 Oct 2 22:01:08.841319 systemd-networkd[1248]: enP51019s1: Link UP Oct 2 22:01:08.841486 systemd-networkd[1248]: eth0: Link UP Oct 2 22:01:08.841544 systemd-networkd[1248]: eth0: Gained carrier Oct 2 22:01:08.846084 systemd-networkd[1248]: enP51019s1: Gained carrier Oct 2 22:01:08.853895 systemd-networkd[1248]: eth0: DHCPv4 address 10.200.20.19/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 22:01:09.464817 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1231) Oct 2 22:01:09.491909 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 22:01:09.499129 systemd[1]: Finished systemd-udev-settle.service. Oct 2 22:01:09.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:09.505437 systemd[1]: Starting lvm2-activation-early.service... Oct 2 22:01:09.847546 lvm[1306]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 22:01:09.895757 systemd[1]: Finished lvm2-activation-early.service. Oct 2 22:01:09.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:09.900965 systemd[1]: Reached target cryptsetup.target. Oct 2 22:01:09.906439 systemd[1]: Starting lvm2-activation.service... Oct 2 22:01:09.913109 lvm[1307]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 22:01:09.934777 systemd[1]: Finished lvm2-activation.service. Oct 2 22:01:09.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:09.939533 systemd[1]: Reached target local-fs-pre.target. Oct 2 22:01:09.944293 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 22:01:09.944321 systemd[1]: Reached target local-fs.target. Oct 2 22:01:09.948656 systemd[1]: Reached target machines.target. Oct 2 22:01:09.954263 systemd[1]: Starting ldconfig.service... Oct 2 22:01:09.958218 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 22:01:09.958278 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 22:01:09.959579 systemd[1]: Starting systemd-boot-update.service... Oct 2 22:01:09.965408 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 22:01:09.972278 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 22:01:09.976909 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 22:01:09.976967 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 22:01:09.977917 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 22:01:09.991738 systemd-tmpfiles[1312]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 22:01:10.004011 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1309 (bootctl) Oct 2 22:01:10.005466 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 22:01:10.011356 systemd-tmpfiles[1312]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 22:01:10.028903 systemd-tmpfiles[1312]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 22:01:10.065453 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 22:01:10.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:10.097937 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 22:01:10.099188 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 22:01:10.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:10.276333 systemd-fsck[1317]: fsck.fat 4.2 (2021-01-31) Oct 2 22:01:10.276333 systemd-fsck[1317]: /dev/sda1: 236 files, 113463/258078 clusters Oct 2 22:01:10.280103 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 22:01:10.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:10.288335 systemd[1]: Mounting boot.mount... Oct 2 22:01:10.303776 systemd[1]: Mounted boot.mount. Oct 2 22:01:10.314693 systemd[1]: Finished systemd-boot-update.service. Oct 2 22:01:10.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:10.332896 systemd-networkd[1248]: eth0: Gained IPv6LL Oct 2 22:01:10.338047 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 22:01:10.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:11.103375 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 22:01:11.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:11.109975 systemd[1]: Starting audit-rules.service... Oct 2 22:01:11.112713 kernel: kauditd_printk_skb: 83 callbacks suppressed Oct 2 22:01:11.112754 kernel: audit: type=1130 audit(1696284071.108:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:11.134556 systemd[1]: Starting clean-ca-certificates.service... Oct 2 22:01:11.140838 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 22:01:11.145000 audit: BPF prog-id=30 op=LOAD Oct 2 22:01:11.147634 systemd[1]: Starting systemd-resolved.service... Oct 2 22:01:11.156205 kernel: audit: type=1334 audit(1696284071.145:168): prog-id=30 op=LOAD Oct 2 22:01:11.157000 audit: BPF prog-id=31 op=LOAD Oct 2 22:01:11.160935 systemd[1]: Starting systemd-timesyncd.service... Oct 2 22:01:11.168914 kernel: audit: type=1334 audit(1696284071.157:169): prog-id=31 op=LOAD Oct 2 22:01:11.170053 systemd[1]: Starting systemd-update-utmp.service... Oct 2 22:01:11.200178 systemd[1]: Finished clean-ca-certificates.service. Oct 2 22:01:11.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:11.205456 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 22:01:11.228825 kernel: audit: type=1130 audit(1696284071.204:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:11.274000 audit[1334]: SYSTEM_BOOT pid=1334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 22:01:11.292149 systemd[1]: Finished systemd-update-utmp.service. Oct 2 22:01:11.303779 kernel: audit: type=1127 audit(1696284071.274:171): pid=1334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 22:01:11.303864 kernel: audit: type=1130 audit(1696284071.298:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:11.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:11.316913 systemd[1]: Started systemd-timesyncd.service. Oct 2 22:01:11.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:11.321614 systemd[1]: Reached target time-set.target. Oct 2 22:01:11.338776 kernel: audit: type=1130 audit(1696284071.320:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:11.346919 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 22:01:11.352000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:11.373124 systemd-resolved[1327]: Positive Trust Anchors: Oct 2 22:01:11.373400 systemd-resolved[1327]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 22:01:11.373481 systemd-resolved[1327]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 22:01:11.373837 kernel: audit: type=1130 audit(1696284071.352:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:11.451886 systemd-resolved[1327]: Using system hostname 'ci-3510.3.0-a-02d4509438'. Oct 2 22:01:11.453700 systemd[1]: Started systemd-resolved.service. Oct 2 22:01:11.458580 systemd[1]: Reached target network.target. Oct 2 22:01:11.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:11.479464 systemd[1]: Reached target network-online.target. Oct 2 22:01:11.484569 kernel: audit: type=1130 audit(1696284071.457:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:11.485203 systemd[1]: Reached target nss-lookup.target. Oct 2 22:01:11.599000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 22:01:11.599000 audit[1344]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd3caf490 a2=420 a3=0 items=0 ppid=1323 pid=1344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:01:11.599000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 22:01:11.612781 kernel: audit: type=1305 audit(1696284071.599:176): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 22:01:11.620232 augenrules[1344]: No rules Oct 2 22:01:11.621254 systemd[1]: Finished audit-rules.service. Oct 2 22:01:11.635146 systemd-timesyncd[1333]: Contacted time server 66.85.78.80:123 (0.flatcar.pool.ntp.org). Oct 2 22:01:11.635209 systemd-timesyncd[1333]: Initial clock synchronization to Mon 2023-10-02 22:01:11.631443 UTC. Oct 2 22:01:19.832738 ldconfig[1308]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 22:01:19.842343 systemd[1]: Finished ldconfig.service. Oct 2 22:01:19.848500 systemd[1]: Starting systemd-update-done.service... Oct 2 22:01:19.875271 systemd[1]: Finished systemd-update-done.service. Oct 2 22:01:19.880602 systemd[1]: Reached target sysinit.target. Oct 2 22:01:19.885366 systemd[1]: Started motdgen.path. Oct 2 22:01:19.890382 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 22:01:19.897312 systemd[1]: Started logrotate.timer. Oct 2 22:01:19.901799 systemd[1]: Started mdadm.timer. Oct 2 22:01:19.905889 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 22:01:19.910927 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 22:01:19.910965 systemd[1]: Reached target paths.target. Oct 2 22:01:19.915509 systemd[1]: Reached target timers.target. Oct 2 22:01:19.920537 systemd[1]: Listening on dbus.socket. Oct 2 22:01:19.925521 systemd[1]: Starting docker.socket... Oct 2 22:01:19.932317 systemd[1]: Listening on sshd.socket. Oct 2 22:01:19.936699 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 22:01:19.937171 systemd[1]: Listening on docker.socket. Oct 2 22:01:19.941530 systemd[1]: Reached target sockets.target. Oct 2 22:01:19.945880 systemd[1]: Reached target basic.target. Oct 2 22:01:19.950123 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 22:01:19.950150 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 22:01:19.951425 systemd[1]: Starting containerd.service... Oct 2 22:01:19.956493 systemd[1]: Starting dbus.service... Oct 2 22:01:19.960919 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 22:01:19.966439 systemd[1]: Starting extend-filesystems.service... Oct 2 22:01:19.973964 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 22:01:19.975436 systemd[1]: Starting motdgen.service... Oct 2 22:01:19.980035 systemd[1]: Started nvidia.service. Oct 2 22:01:19.985395 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 22:01:19.990695 systemd[1]: Starting prepare-critools.service... Oct 2 22:01:19.996134 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 22:01:20.001665 systemd[1]: Starting sshd-keygen.service... Oct 2 22:01:20.010856 systemd[1]: Starting systemd-logind.service... Oct 2 22:01:20.015044 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 22:01:20.015104 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 22:01:20.015470 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 22:01:20.016084 systemd[1]: Starting update-engine.service... Oct 2 22:01:20.022357 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 22:01:20.034598 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 22:01:20.034817 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 22:01:20.074011 jq[1354]: false Oct 2 22:01:20.074272 jq[1373]: true Oct 2 22:01:20.105487 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 22:01:20.105668 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 22:01:20.106515 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 22:01:20.106653 systemd[1]: Finished motdgen.service. Oct 2 22:01:20.144820 jq[1382]: true Oct 2 22:01:20.149379 extend-filesystems[1355]: Found sda Oct 2 22:01:20.149379 extend-filesystems[1355]: Found sda1 Oct 2 22:01:20.161964 extend-filesystems[1355]: Found sda2 Oct 2 22:01:20.161964 extend-filesystems[1355]: Found sda3 Oct 2 22:01:20.161964 extend-filesystems[1355]: Found usr Oct 2 22:01:20.161964 extend-filesystems[1355]: Found sda4 Oct 2 22:01:20.161964 extend-filesystems[1355]: Found sda6 Oct 2 22:01:20.161964 extend-filesystems[1355]: Found sda7 Oct 2 22:01:20.161964 extend-filesystems[1355]: Found sda9 Oct 2 22:01:20.161964 extend-filesystems[1355]: Checking size of /dev/sda9 Oct 2 22:01:20.167565 systemd-logind[1367]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 22:01:20.271442 tar[1375]: ./ Oct 2 22:01:20.271442 tar[1375]: ./macvlan Oct 2 22:01:20.271604 env[1377]: time="2023-10-02T22:01:20.226810755Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 22:01:20.271721 tar[1376]: crictl Oct 2 22:01:20.171914 systemd-logind[1367]: New seat seat0. Oct 2 22:01:20.296847 tar[1375]: ./static Oct 2 22:01:20.323380 extend-filesystems[1355]: Old size kept for /dev/sda9 Oct 2 22:01:20.343162 extend-filesystems[1355]: Found sr0 Oct 2 22:01:20.332527 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 22:01:20.363923 env[1377]: time="2023-10-02T22:01:20.353379655Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 22:01:20.363923 env[1377]: time="2023-10-02T22:01:20.356118087Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 22:01:20.363923 env[1377]: time="2023-10-02T22:01:20.358133616Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 22:01:20.363923 env[1377]: time="2023-10-02T22:01:20.358165571Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 22:01:20.363923 env[1377]: time="2023-10-02T22:01:20.359598059Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 22:01:20.363923 env[1377]: time="2023-10-02T22:01:20.359620896Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 22:01:20.363923 env[1377]: time="2023-10-02T22:01:20.359634854Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 22:01:20.363923 env[1377]: time="2023-10-02T22:01:20.359644772Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 22:01:20.363923 env[1377]: time="2023-10-02T22:01:20.359724842Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 22:01:20.363923 env[1377]: time="2023-10-02T22:01:20.360080914Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 22:01:20.332689 systemd[1]: Finished extend-filesystems.service. Oct 2 22:01:20.364238 env[1377]: time="2023-10-02T22:01:20.360225254Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 22:01:20.364238 env[1377]: time="2023-10-02T22:01:20.360243332Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 22:01:20.364238 env[1377]: time="2023-10-02T22:01:20.360296725Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 22:01:20.364238 env[1377]: time="2023-10-02T22:01:20.360309323Z" level=info msg="metadata content store policy set" policy=shared Oct 2 22:01:20.379714 bash[1425]: Updated "/home/core/.ssh/authorized_keys" Oct 2 22:01:20.380727 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 22:01:20.390902 env[1377]: time="2023-10-02T22:01:20.390400037Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 22:01:20.390902 env[1377]: time="2023-10-02T22:01:20.390478106Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 22:01:20.390902 env[1377]: time="2023-10-02T22:01:20.390494424Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 22:01:20.390902 env[1377]: time="2023-10-02T22:01:20.390547577Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 22:01:20.390902 env[1377]: time="2023-10-02T22:01:20.390567694Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 22:01:20.390902 env[1377]: time="2023-10-02T22:01:20.390581852Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 22:01:20.390902 env[1377]: time="2023-10-02T22:01:20.390737111Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 22:01:20.392464 env[1377]: time="2023-10-02T22:01:20.391557121Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 22:01:20.392464 env[1377]: time="2023-10-02T22:01:20.391589597Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 22:01:20.392464 env[1377]: time="2023-10-02T22:01:20.391604195Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 22:01:20.392464 env[1377]: time="2023-10-02T22:01:20.391628031Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 22:01:20.392464 env[1377]: time="2023-10-02T22:01:20.391644389Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 22:01:20.392464 env[1377]: time="2023-10-02T22:01:20.391836643Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 22:01:20.392464 env[1377]: time="2023-10-02T22:01:20.391934390Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 22:01:20.392464 env[1377]: time="2023-10-02T22:01:20.392324738Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 22:01:20.392464 env[1377]: time="2023-10-02T22:01:20.392364452Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 22:01:20.392464 env[1377]: time="2023-10-02T22:01:20.392380490Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 22:01:20.392950 env[1377]: time="2023-10-02T22:01:20.392745201Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 22:01:20.393010 tar[1375]: ./vlan Oct 2 22:01:20.393343 env[1377]: time="2023-10-02T22:01:20.393200860Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 22:01:20.393343 env[1377]: time="2023-10-02T22:01:20.393226377Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 22:01:20.393343 env[1377]: time="2023-10-02T22:01:20.393240415Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 22:01:20.393343 env[1377]: time="2023-10-02T22:01:20.393253213Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 22:01:20.393343 env[1377]: time="2023-10-02T22:01:20.393278809Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 22:01:20.393343 env[1377]: time="2023-10-02T22:01:20.393290208Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 22:01:20.393343 env[1377]: time="2023-10-02T22:01:20.393301686Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 22:01:20.393343 env[1377]: time="2023-10-02T22:01:20.393315525Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 22:01:20.393674 env[1377]: time="2023-10-02T22:01:20.393657279Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 22:01:20.393796 env[1377]: time="2023-10-02T22:01:20.393755185Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 22:01:20.393878 env[1377]: time="2023-10-02T22:01:20.393846853Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 22:01:20.394008 env[1377]: time="2023-10-02T22:01:20.393992314Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 22:01:20.394108 env[1377]: time="2023-10-02T22:01:20.394092260Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 22:01:20.394236 env[1377]: time="2023-10-02T22:01:20.394221203Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 22:01:20.394330 env[1377]: time="2023-10-02T22:01:20.394316190Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 22:01:20.394437 env[1377]: time="2023-10-02T22:01:20.394423256Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 22:01:20.395110 env[1377]: time="2023-10-02T22:01:20.395035413Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 22:01:20.412568 env[1377]: time="2023-10-02T22:01:20.395414122Z" level=info msg="Connect containerd service" Oct 2 22:01:20.412568 env[1377]: time="2023-10-02T22:01:20.395469115Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 22:01:20.412568 env[1377]: time="2023-10-02T22:01:20.396297804Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 22:01:20.412568 env[1377]: time="2023-10-02T22:01:20.396622880Z" level=info msg="Start subscribing containerd event" Oct 2 22:01:20.412568 env[1377]: time="2023-10-02T22:01:20.396685271Z" level=info msg="Start recovering state" Oct 2 22:01:20.412568 env[1377]: time="2023-10-02T22:01:20.396728946Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 22:01:20.412568 env[1377]: time="2023-10-02T22:01:20.396747623Z" level=info msg="Start event monitor" Oct 2 22:01:20.412568 env[1377]: time="2023-10-02T22:01:20.396787938Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 22:01:20.412568 env[1377]: time="2023-10-02T22:01:20.396831212Z" level=info msg="Start snapshots syncer" Oct 2 22:01:20.412568 env[1377]: time="2023-10-02T22:01:20.396843170Z" level=info msg="Start cni network conf syncer for default" Oct 2 22:01:20.412568 env[1377]: time="2023-10-02T22:01:20.396852969Z" level=info msg="Start streaming server" Oct 2 22:01:20.396940 systemd[1]: Started containerd.service. Oct 2 22:01:20.427997 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 22:01:20.432733 env[1377]: time="2023-10-02T22:01:20.432692270Z" level=info msg="containerd successfully booted in 0.206617s" Oct 2 22:01:20.482232 tar[1375]: ./portmap Oct 2 22:01:20.502469 dbus-daemon[1353]: [system] SELinux support is enabled Oct 2 22:01:20.502609 systemd[1]: Started dbus.service. Oct 2 22:01:20.508437 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 22:01:20.508459 systemd[1]: Reached target system-config.target. Oct 2 22:01:20.517122 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 22:01:20.517145 systemd[1]: Reached target user-config.target. Oct 2 22:01:20.525954 systemd[1]: Started systemd-logind.service. Oct 2 22:01:20.530926 dbus-daemon[1353]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 22:01:20.551895 tar[1375]: ./host-local Oct 2 22:01:20.619365 tar[1375]: ./vrf Oct 2 22:01:20.671785 tar[1375]: ./bridge Oct 2 22:01:20.730359 tar[1375]: ./tuning Oct 2 22:01:20.781400 tar[1375]: ./firewall Oct 2 22:01:20.850940 tar[1375]: ./host-device Oct 2 22:01:20.858547 update_engine[1370]: I1002 22:01:20.842342 1370 main.cc:92] Flatcar Update Engine starting Oct 2 22:01:20.884279 tar[1375]: ./sbr Oct 2 22:01:20.915941 tar[1375]: ./loopback Oct 2 22:01:20.917516 systemd[1]: Started update-engine.service. Oct 2 22:01:20.928961 update_engine[1370]: I1002 22:01:20.917539 1370 update_check_scheduler.cc:74] Next update check in 5m30s Oct 2 22:01:20.924095 systemd[1]: Started locksmithd.service. Oct 2 22:01:20.975120 tar[1375]: ./dhcp Oct 2 22:01:20.995875 systemd[1]: Finished prepare-critools.service. Oct 2 22:01:21.058246 tar[1375]: ./ptp Oct 2 22:01:21.090986 tar[1375]: ./ipvlan Oct 2 22:01:21.122541 tar[1375]: ./bandwidth Oct 2 22:01:21.215776 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 22:01:21.874882 sshd_keygen[1371]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 22:01:21.901350 systemd[1]: Finished sshd-keygen.service. Oct 2 22:01:21.907948 systemd[1]: Starting issuegen.service... Oct 2 22:01:21.915782 systemd[1]: Started waagent.service. Oct 2 22:01:21.920666 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 22:01:21.920836 systemd[1]: Finished issuegen.service. Oct 2 22:01:21.926678 systemd[1]: Starting systemd-user-sessions.service... Oct 2 22:01:21.958896 systemd[1]: Finished systemd-user-sessions.service. Oct 2 22:01:21.966091 systemd[1]: Started getty@tty1.service. Oct 2 22:01:21.972064 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 22:01:21.977333 systemd[1]: Reached target getty.target. Oct 2 22:01:21.981932 systemd[1]: Reached target multi-user.target. Oct 2 22:01:21.988512 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 22:01:22.008146 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 22:01:22.008315 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 22:01:22.014377 systemd[1]: Startup finished in 740ms (kernel) + 19.483s (initrd) + 26.305s (userspace) = 46.529s. Oct 2 22:01:22.658073 locksmithd[1460]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 22:01:22.748313 login[1481]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Oct 2 22:01:22.750189 login[1482]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 22:01:22.795132 systemd[1]: Created slice user-500.slice. Oct 2 22:01:22.796496 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 22:01:22.798598 systemd-logind[1367]: New session 1 of user core. Oct 2 22:01:22.846429 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 22:01:22.847883 systemd[1]: Starting user@500.service... Oct 2 22:01:22.886652 (systemd)[1485]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:01:23.195629 systemd[1485]: Queued start job for default target default.target. Oct 2 22:01:23.196939 systemd[1485]: Reached target paths.target. Oct 2 22:01:23.197076 systemd[1485]: Reached target sockets.target. Oct 2 22:01:23.197146 systemd[1485]: Reached target timers.target. Oct 2 22:01:23.197213 systemd[1485]: Reached target basic.target. Oct 2 22:01:23.197329 systemd[1485]: Reached target default.target. Oct 2 22:01:23.197401 systemd[1]: Started user@500.service. Oct 2 22:01:23.198230 systemd[1485]: Startup finished in 302ms. Oct 2 22:01:23.198282 systemd[1]: Started session-1.scope. Oct 2 22:01:23.748619 login[1481]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 22:01:23.752809 systemd-logind[1367]: New session 2 of user core. Oct 2 22:01:23.753203 systemd[1]: Started session-2.scope. Oct 2 22:01:28.902885 waagent[1477]: 2023-10-02T22:01:28.902741Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 22:01:28.909884 waagent[1477]: 2023-10-02T22:01:28.909811Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 22:01:28.914661 waagent[1477]: 2023-10-02T22:01:28.914603Z INFO Daemon Daemon Python: 3.9.16 Oct 2 22:01:28.919688 waagent[1477]: 2023-10-02T22:01:28.919585Z INFO Daemon Daemon Run daemon Oct 2 22:01:28.924082 waagent[1477]: 2023-10-02T22:01:28.924021Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 22:01:28.945702 waagent[1477]: 2023-10-02T22:01:28.945580Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 22:01:28.961570 waagent[1477]: 2023-10-02T22:01:28.961446Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 22:01:28.972271 waagent[1477]: 2023-10-02T22:01:28.972210Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 22:01:28.977699 waagent[1477]: 2023-10-02T22:01:28.977642Z INFO Daemon Daemon Using waagent for provisioning Oct 2 22:01:28.983681 waagent[1477]: 2023-10-02T22:01:28.983624Z INFO Daemon Daemon Activate resource disk Oct 2 22:01:28.989205 waagent[1477]: 2023-10-02T22:01:28.989148Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 22:01:29.003777 waagent[1477]: 2023-10-02T22:01:29.003711Z INFO Daemon Daemon Found device: None Oct 2 22:01:29.008789 waagent[1477]: 2023-10-02T22:01:29.008722Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 22:01:29.017920 waagent[1477]: 2023-10-02T22:01:29.017864Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 22:01:29.031295 waagent[1477]: 2023-10-02T22:01:29.031235Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 22:01:29.037802 waagent[1477]: 2023-10-02T22:01:29.037727Z INFO Daemon Daemon Running default provisioning handler Oct 2 22:01:29.054980 waagent[1477]: 2023-10-02T22:01:29.054820Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 22:01:29.073884 waagent[1477]: 2023-10-02T22:01:29.073730Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 22:01:29.084832 waagent[1477]: 2023-10-02T22:01:29.084742Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 22:01:29.090354 waagent[1477]: 2023-10-02T22:01:29.090290Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 22:01:29.116199 waagent[1477]: 2023-10-02T22:01:29.116080Z INFO Daemon Daemon Successfully mounted dvd Oct 2 22:01:29.263989 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 22:01:29.305823 waagent[1477]: 2023-10-02T22:01:29.305673Z INFO Daemon Daemon Detect protocol endpoint Oct 2 22:01:29.311305 waagent[1477]: 2023-10-02T22:01:29.311225Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 22:01:29.317222 waagent[1477]: 2023-10-02T22:01:29.317162Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 22:01:29.324176 waagent[1477]: 2023-10-02T22:01:29.324118Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 22:01:29.330128 waagent[1477]: 2023-10-02T22:01:29.330074Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 22:01:29.335643 waagent[1477]: 2023-10-02T22:01:29.335588Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 22:01:29.563971 waagent[1477]: 2023-10-02T22:01:29.563850Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 22:01:29.571011 waagent[1477]: 2023-10-02T22:01:29.570967Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 22:01:29.576637 waagent[1477]: 2023-10-02T22:01:29.576581Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 22:01:30.399384 waagent[1477]: 2023-10-02T22:01:30.399233Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 22:01:30.415080 waagent[1477]: 2023-10-02T22:01:30.415009Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 22:01:30.420910 waagent[1477]: 2023-10-02T22:01:30.420851Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 22:01:30.507342 waagent[1477]: 2023-10-02T22:01:30.507205Z INFO Daemon Daemon Found private key matching thumbprint 73454497119BFE51350D0A27742329F600CA58AC Oct 2 22:01:30.516413 waagent[1477]: 2023-10-02T22:01:30.516339Z INFO Daemon Daemon Certificate with thumbprint B19FBBCF39D12C4EEE9832282B4BDFA8281BCF9A has no matching private key. Oct 2 22:01:30.526803 waagent[1477]: 2023-10-02T22:01:30.526705Z INFO Daemon Daemon Fetch goal state completed Oct 2 22:01:30.590237 waagent[1477]: 2023-10-02T22:01:30.590181Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: fef02e3f-6ba7-462c-8b02-4f8fd74e49fb New eTag: 6315803688966385817] Oct 2 22:01:30.601505 waagent[1477]: 2023-10-02T22:01:30.601435Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 22:01:30.617756 waagent[1477]: 2023-10-02T22:01:30.617687Z INFO Daemon Daemon Starting provisioning Oct 2 22:01:30.622801 waagent[1477]: 2023-10-02T22:01:30.622727Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 22:01:30.627757 waagent[1477]: 2023-10-02T22:01:30.627700Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-02d4509438] Oct 2 22:01:30.708649 waagent[1477]: 2023-10-02T22:01:30.708518Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-02d4509438] Oct 2 22:01:30.715297 waagent[1477]: 2023-10-02T22:01:30.715221Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 22:01:30.722106 waagent[1477]: 2023-10-02T22:01:30.722046Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 22:01:30.742291 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 22:01:30.742453 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 22:01:30.742509 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 22:01:30.742734 systemd[1]: Stopping systemd-networkd.service... Oct 2 22:01:30.747817 systemd-networkd[1248]: eth0: DHCPv6 lease lost Oct 2 22:01:30.749883 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 22:01:30.750047 systemd[1]: Stopped systemd-networkd.service. Oct 2 22:01:30.752239 systemd[1]: Starting systemd-networkd.service... Oct 2 22:01:30.784136 systemd-networkd[1530]: enP51019s1: Link UP Oct 2 22:01:30.784376 systemd-networkd[1530]: enP51019s1: Gained carrier Oct 2 22:01:30.785485 systemd-networkd[1530]: eth0: Link UP Oct 2 22:01:30.785568 systemd-networkd[1530]: eth0: Gained carrier Oct 2 22:01:30.785987 systemd-networkd[1530]: lo: Link UP Oct 2 22:01:30.786056 systemd-networkd[1530]: lo: Gained carrier Oct 2 22:01:30.786342 systemd-networkd[1530]: eth0: Gained IPv6LL Oct 2 22:01:30.787261 systemd-networkd[1530]: Enumeration completed Oct 2 22:01:30.787436 systemd[1]: Started systemd-networkd.service. Oct 2 22:01:30.788959 systemd-networkd[1530]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 22:01:30.788987 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 22:01:30.792935 waagent[1477]: 2023-10-02T22:01:30.792670Z INFO Daemon Daemon Create user account if not exists Oct 2 22:01:30.799013 waagent[1477]: 2023-10-02T22:01:30.798856Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 22:01:30.805093 waagent[1477]: 2023-10-02T22:01:30.805015Z INFO Daemon Daemon Configure sudoer Oct 2 22:01:30.810053 waagent[1477]: 2023-10-02T22:01:30.809987Z INFO Daemon Daemon Configure sshd Oct 2 22:01:30.814364 waagent[1477]: 2023-10-02T22:01:30.814305Z INFO Daemon Daemon Deploy ssh public key. Oct 2 22:01:30.814828 systemd-networkd[1530]: eth0: DHCPv4 address 10.200.20.19/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 22:01:30.820283 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 22:01:30.874278 waagent[1477]: 2023-10-02T22:01:30.874148Z INFO Daemon Daemon Decode custom data Oct 2 22:01:30.879130 waagent[1477]: 2023-10-02T22:01:30.879058Z INFO Daemon Daemon Save custom data Oct 2 22:01:32.081776 waagent[1477]: 2023-10-02T22:01:32.081680Z INFO Daemon Daemon Provisioning complete Oct 2 22:01:32.102135 waagent[1477]: 2023-10-02T22:01:32.102066Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 22:01:32.108986 waagent[1477]: 2023-10-02T22:01:32.108920Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 22:01:32.120678 waagent[1477]: 2023-10-02T22:01:32.120613Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 22:01:32.425010 waagent[1539]: 2023-10-02T22:01:32.424874Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 22:01:32.426052 waagent[1539]: 2023-10-02T22:01:32.426000Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 22:01:32.426281 waagent[1539]: 2023-10-02T22:01:32.426233Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 22:01:32.438571 waagent[1539]: 2023-10-02T22:01:32.438506Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 22:01:32.438858 waagent[1539]: 2023-10-02T22:01:32.438808Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 22:01:32.517667 waagent[1539]: 2023-10-02T22:01:32.517539Z INFO ExtHandler ExtHandler Found private key matching thumbprint 73454497119BFE51350D0A27742329F600CA58AC Oct 2 22:01:32.518048 waagent[1539]: 2023-10-02T22:01:32.517995Z INFO ExtHandler ExtHandler Certificate with thumbprint B19FBBCF39D12C4EEE9832282B4BDFA8281BCF9A has no matching private key. Oct 2 22:01:32.518358 waagent[1539]: 2023-10-02T22:01:32.518312Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 22:01:32.531658 waagent[1539]: 2023-10-02T22:01:32.531609Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 53526235-87d0-4600-8e9d-7992661acfd8 New eTag: 6315803688966385817] Oct 2 22:01:32.532324 waagent[1539]: 2023-10-02T22:01:32.532270Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 22:01:32.624993 waagent[1539]: 2023-10-02T22:01:32.624854Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 22:01:32.635104 waagent[1539]: 2023-10-02T22:01:32.635036Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1539 Oct 2 22:01:32.638901 waagent[1539]: 2023-10-02T22:01:32.638843Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 22:01:32.640358 waagent[1539]: 2023-10-02T22:01:32.640304Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 22:01:32.858071 waagent[1539]: 2023-10-02T22:01:32.858014Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 22:01:32.858663 waagent[1539]: 2023-10-02T22:01:32.858608Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 22:01:32.869138 waagent[1539]: 2023-10-02T22:01:32.869086Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 22:01:32.869722 waagent[1539]: 2023-10-02T22:01:32.869669Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 22:01:32.870958 waagent[1539]: 2023-10-02T22:01:32.870899Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 22:01:32.872366 waagent[1539]: 2023-10-02T22:01:32.872300Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 22:01:32.872649 waagent[1539]: 2023-10-02T22:01:32.872581Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 22:01:32.873218 waagent[1539]: 2023-10-02T22:01:32.873146Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 22:01:32.873806 waagent[1539]: 2023-10-02T22:01:32.873720Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 22:01:32.874286 waagent[1539]: 2023-10-02T22:01:32.874217Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 22:01:32.874738 waagent[1539]: 2023-10-02T22:01:32.874663Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 22:01:32.874738 waagent[1539]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 22:01:32.874738 waagent[1539]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 22:01:32.874738 waagent[1539]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 22:01:32.874738 waagent[1539]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 22:01:32.874738 waagent[1539]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 22:01:32.874738 waagent[1539]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 22:01:32.875334 waagent[1539]: 2023-10-02T22:01:32.875267Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 22:01:32.877291 waagent[1539]: 2023-10-02T22:01:32.877148Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 22:01:32.877728 waagent[1539]: 2023-10-02T22:01:32.877655Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 22:01:32.878264 waagent[1539]: 2023-10-02T22:01:32.878198Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 22:01:32.878926 waagent[1539]: 2023-10-02T22:01:32.878845Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 22:01:32.879286 waagent[1539]: 2023-10-02T22:01:32.879223Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 22:01:32.880146 waagent[1539]: 2023-10-02T22:01:32.880076Z INFO EnvHandler ExtHandler Configure routes Oct 2 22:01:32.880243 waagent[1539]: 2023-10-02T22:01:32.880180Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 22:01:32.880736 waagent[1539]: 2023-10-02T22:01:32.880664Z INFO EnvHandler ExtHandler Gateway:None Oct 2 22:01:32.882137 waagent[1539]: 2023-10-02T22:01:32.882077Z INFO EnvHandler ExtHandler Routes:None Oct 2 22:01:32.892915 waagent[1539]: 2023-10-02T22:01:32.892839Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 22:01:32.893581 waagent[1539]: 2023-10-02T22:01:32.893520Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 22:01:32.894751 waagent[1539]: 2023-10-02T22:01:32.894686Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 22:01:32.941719 waagent[1539]: 2023-10-02T22:01:32.941652Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 22:01:32.958930 waagent[1539]: 2023-10-02T22:01:32.958819Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1530' Oct 2 22:01:33.067077 waagent[1539]: 2023-10-02T22:01:33.067003Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.9.1.1 -- exiting Oct 2 22:01:33.124094 waagent[1477]: 2023-10-02T22:01:33.123924Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 22:01:33.127602 waagent[1477]: 2023-10-02T22:01:33.127548Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.9.1.1 to be the latest agent Oct 2 22:01:34.272165 waagent[1565]: 2023-10-02T22:01:34.272068Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.9.1.1) Oct 2 22:01:34.272826 waagent[1565]: 2023-10-02T22:01:34.272751Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 22:01:34.272961 waagent[1565]: 2023-10-02T22:01:34.272914Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 22:01:34.282806 waagent[1565]: 2023-10-02T22:01:34.282672Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 22:01:34.283213 waagent[1565]: 2023-10-02T22:01:34.283154Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 22:01:34.283357 waagent[1565]: 2023-10-02T22:01:34.283311Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 22:01:34.296149 waagent[1565]: 2023-10-02T22:01:34.296080Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 22:01:34.304731 waagent[1565]: 2023-10-02T22:01:34.304674Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 22:01:34.305752 waagent[1565]: 2023-10-02T22:01:34.305689Z INFO ExtHandler Oct 2 22:01:34.305917 waagent[1565]: 2023-10-02T22:01:34.305867Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 8486f4b2-f5b4-4952-b1b7-e5d5a45d038e eTag: 6315803688966385817 source: Fabric] Oct 2 22:01:34.306631 waagent[1565]: 2023-10-02T22:01:34.306574Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 22:01:34.307896 waagent[1565]: 2023-10-02T22:01:34.307834Z INFO ExtHandler Oct 2 22:01:34.308035 waagent[1565]: 2023-10-02T22:01:34.307987Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 22:01:34.314112 waagent[1565]: 2023-10-02T22:01:34.314063Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 22:01:34.314562 waagent[1565]: 2023-10-02T22:01:34.314513Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 22:01:34.333481 waagent[1565]: 2023-10-02T22:01:34.333423Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 22:01:34.415452 waagent[1565]: 2023-10-02T22:01:34.415313Z INFO ExtHandler Downloaded certificate {'thumbprint': 'B19FBBCF39D12C4EEE9832282B4BDFA8281BCF9A', 'hasPrivateKey': False} Oct 2 22:01:34.416530 waagent[1565]: 2023-10-02T22:01:34.416469Z INFO ExtHandler Downloaded certificate {'thumbprint': '73454497119BFE51350D0A27742329F600CA58AC', 'hasPrivateKey': True} Oct 2 22:01:34.417588 waagent[1565]: 2023-10-02T22:01:34.417525Z INFO ExtHandler Fetch goal state completed Oct 2 22:01:34.439322 waagent[1565]: 2023-10-02T22:01:34.439260Z INFO ExtHandler ExtHandler WALinuxAgent-2.9.1.1 running as process 1565 Oct 2 22:01:34.442756 waagent[1565]: 2023-10-02T22:01:34.442695Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 22:01:34.444258 waagent[1565]: 2023-10-02T22:01:34.444201Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 22:01:34.450061 waagent[1565]: 2023-10-02T22:01:34.450001Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 22:01:34.450438 waagent[1565]: 2023-10-02T22:01:34.450379Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 22:01:34.461346 waagent[1565]: 2023-10-02T22:01:34.461282Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 22:01:34.461827 waagent[1565]: 2023-10-02T22:01:34.461751Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 22:01:34.469332 waagent[1565]: 2023-10-02T22:01:34.469224Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. Oct 2 22:01:34.472950 waagent[1565]: 2023-10-02T22:01:34.472891Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 22:01:34.474450 waagent[1565]: 2023-10-02T22:01:34.474377Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 22:01:34.475117 waagent[1565]: 2023-10-02T22:01:34.475057Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 22:01:34.475392 waagent[1565]: 2023-10-02T22:01:34.475322Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 22:01:34.476093 waagent[1565]: 2023-10-02T22:01:34.476036Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 22:01:34.476458 waagent[1565]: 2023-10-02T22:01:34.476406Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 22:01:34.476458 waagent[1565]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 22:01:34.476458 waagent[1565]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 22:01:34.476458 waagent[1565]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 22:01:34.476458 waagent[1565]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 22:01:34.476458 waagent[1565]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 22:01:34.476458 waagent[1565]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 22:01:34.478902 waagent[1565]: 2023-10-02T22:01:34.478769Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 22:01:34.479444 waagent[1565]: 2023-10-02T22:01:34.479375Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 22:01:34.480071 waagent[1565]: 2023-10-02T22:01:34.480007Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 22:01:34.480583 waagent[1565]: 2023-10-02T22:01:34.480522Z INFO EnvHandler ExtHandler Configure routes Oct 2 22:01:34.480953 waagent[1565]: 2023-10-02T22:01:34.480878Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 22:01:34.481264 waagent[1565]: 2023-10-02T22:01:34.481204Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 22:01:34.483340 waagent[1565]: 2023-10-02T22:01:34.483182Z INFO EnvHandler ExtHandler Gateway:None Oct 2 22:01:34.484027 waagent[1565]: 2023-10-02T22:01:34.483961Z INFO EnvHandler ExtHandler Routes:None Oct 2 22:01:34.487350 waagent[1565]: 2023-10-02T22:01:34.487204Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 22:01:34.487851 waagent[1565]: 2023-10-02T22:01:34.487729Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 22:01:34.489331 waagent[1565]: 2023-10-02T22:01:34.489269Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 22:01:34.505302 waagent[1565]: 2023-10-02T22:01:34.505224Z INFO ExtHandler ExtHandler No requested version specified, checking for all versions for agent update (family: Prod) Oct 2 22:01:34.506531 waagent[1565]: 2023-10-02T22:01:34.506458Z INFO ExtHandler ExtHandler Downloading manifest Oct 2 22:01:34.510659 waagent[1565]: 2023-10-02T22:01:34.510585Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 22:01:34.510659 waagent[1565]: Executing ['ip', '-a', '-o', 'link']: Oct 2 22:01:34.510659 waagent[1565]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 22:01:34.510659 waagent[1565]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:c5:52:6d brd ff:ff:ff:ff:ff:ff Oct 2 22:01:34.510659 waagent[1565]: 3: enP51019s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:c5:52:6d brd ff:ff:ff:ff:ff:ff\ altname enP51019p0s2 Oct 2 22:01:34.510659 waagent[1565]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 22:01:34.510659 waagent[1565]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 22:01:34.510659 waagent[1565]: 2: eth0 inet 10.200.20.19/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 22:01:34.510659 waagent[1565]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 22:01:34.510659 waagent[1565]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 22:01:34.510659 waagent[1565]: 2: eth0 inet6 fe80::20d:3aff:fec5:526d/64 scope link \ valid_lft forever preferred_lft forever Oct 2 22:01:34.547454 waagent[1565]: 2023-10-02T22:01:34.547352Z INFO ExtHandler ExtHandler Oct 2 22:01:34.547575 waagent[1565]: 2023-10-02T22:01:34.547513Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 69550c09-ee54-46a0-86a0-eb370d8c506e correlation 9d50da00-5392-4995-bb9d-e614f80ec66e created: 2023-10-02T21:59:48.326134Z] Oct 2 22:01:34.548484 waagent[1565]: 2023-10-02T22:01:34.548418Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 22:01:34.550453 waagent[1565]: 2023-10-02T22:01:34.550390Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 2 ms] Oct 2 22:01:34.575573 waagent[1565]: 2023-10-02T22:01:34.575215Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 22:01:34.592420 waagent[1565]: 2023-10-02T22:01:34.592341Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.9.1.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 61397A26-0E01-4F2A-97B3-94B7B638D31D;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 22:01:34.791458 waagent[1565]: 2023-10-02T22:01:34.791325Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules. Current Firewall rules: Oct 2 22:01:34.791458 waagent[1565]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 22:01:34.791458 waagent[1565]: pkts bytes target prot opt in out source destination Oct 2 22:01:34.791458 waagent[1565]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 22:01:34.791458 waagent[1565]: pkts bytes target prot opt in out source destination Oct 2 22:01:34.791458 waagent[1565]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 22:01:34.791458 waagent[1565]: pkts bytes target prot opt in out source destination Oct 2 22:01:34.791458 waagent[1565]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 22:01:34.791458 waagent[1565]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 22:01:34.791458 waagent[1565]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 22:01:34.800408 waagent[1565]: 2023-10-02T22:01:34.800255Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 22:01:34.800408 waagent[1565]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 22:01:34.800408 waagent[1565]: pkts bytes target prot opt in out source destination Oct 2 22:01:34.800408 waagent[1565]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 22:01:34.800408 waagent[1565]: pkts bytes target prot opt in out source destination Oct 2 22:01:34.800408 waagent[1565]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 22:01:34.800408 waagent[1565]: pkts bytes target prot opt in out source destination Oct 2 22:01:34.800408 waagent[1565]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 22:01:34.800408 waagent[1565]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 22:01:34.800408 waagent[1565]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 22:01:34.800882 waagent[1565]: 2023-10-02T22:01:34.800830Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 22:01:56.587269 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Oct 2 22:02:02.322628 systemd[1]: Created slice system-sshd.slice. Oct 2 22:02:02.324415 systemd[1]: Started sshd@0-10.200.20.19:22-10.200.12.6:34370.service. Oct 2 22:02:03.030034 sshd[1616]: Accepted publickey for core from 10.200.12.6 port 34370 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:02:03.052137 sshd[1616]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:02:03.056287 systemd-logind[1367]: New session 3 of user core. Oct 2 22:02:03.057097 systemd[1]: Started session-3.scope. Oct 2 22:02:03.388359 systemd[1]: Started sshd@1-10.200.20.19:22-10.200.12.6:34374.service. Oct 2 22:02:03.830083 sshd[1621]: Accepted publickey for core from 10.200.12.6 port 34374 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:02:03.831643 sshd[1621]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:02:03.835515 systemd-logind[1367]: New session 4 of user core. Oct 2 22:02:03.835942 systemd[1]: Started session-4.scope. Oct 2 22:02:04.149251 sshd[1621]: pam_unix(sshd:session): session closed for user core Oct 2 22:02:04.152109 systemd-logind[1367]: Session 4 logged out. Waiting for processes to exit. Oct 2 22:02:04.152187 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 22:02:04.152987 systemd[1]: sshd@1-10.200.20.19:22-10.200.12.6:34374.service: Deactivated successfully. Oct 2 22:02:04.153916 systemd-logind[1367]: Removed session 4. Oct 2 22:02:04.215606 systemd[1]: Started sshd@2-10.200.20.19:22-10.200.12.6:34378.service. Oct 2 22:02:04.624261 sshd[1627]: Accepted publickey for core from 10.200.12.6 port 34378 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:02:04.625826 sshd[1627]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:02:04.629710 systemd-logind[1367]: New session 5 of user core. Oct 2 22:02:04.630150 systemd[1]: Started session-5.scope. Oct 2 22:02:04.917190 sshd[1627]: pam_unix(sshd:session): session closed for user core Oct 2 22:02:04.920018 systemd[1]: sshd@2-10.200.20.19:22-10.200.12.6:34378.service: Deactivated successfully. Oct 2 22:02:04.920646 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 22:02:04.921138 systemd-logind[1367]: Session 5 logged out. Waiting for processes to exit. Oct 2 22:02:04.921903 systemd-logind[1367]: Removed session 5. Oct 2 22:02:04.984589 systemd[1]: Started sshd@3-10.200.20.19:22-10.200.12.6:34390.service. Oct 2 22:02:05.391424 sshd[1633]: Accepted publickey for core from 10.200.12.6 port 34390 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:02:05.392980 sshd[1633]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:02:05.396820 systemd-logind[1367]: New session 6 of user core. Oct 2 22:02:05.397278 systemd[1]: Started session-6.scope. Oct 2 22:02:05.686619 sshd[1633]: pam_unix(sshd:session): session closed for user core Oct 2 22:02:05.689553 systemd-logind[1367]: Session 6 logged out. Waiting for processes to exit. Oct 2 22:02:05.689631 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 22:02:05.690640 systemd[1]: sshd@3-10.200.20.19:22-10.200.12.6:34390.service: Deactivated successfully. Oct 2 22:02:05.691333 systemd-logind[1367]: Removed session 6. Oct 2 22:02:05.759454 systemd[1]: Started sshd@4-10.200.20.19:22-10.200.12.6:34404.service. Oct 2 22:02:06.200638 sshd[1639]: Accepted publickey for core from 10.200.12.6 port 34404 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:02:06.202225 sshd[1639]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:02:06.206186 systemd-logind[1367]: New session 7 of user core. Oct 2 22:02:06.206560 systemd[1]: Started session-7.scope. Oct 2 22:02:06.486009 update_engine[1370]: I1002 22:02:06.485550 1370 update_attempter.cc:505] Updating boot flags... Oct 2 22:02:06.862295 sudo[1642]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 22:02:06.862486 sudo[1642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 22:02:06.910886 dbus-daemon[1353]: avc: received setenforce notice (enforcing=1) Oct 2 22:02:06.911790 sudo[1642]: pam_unix(sudo:session): session closed for user root Oct 2 22:02:06.999174 sshd[1639]: pam_unix(sshd:session): session closed for user core Oct 2 22:02:07.002588 systemd[1]: sshd@4-10.200.20.19:22-10.200.12.6:34404.service: Deactivated successfully. Oct 2 22:02:07.003330 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 22:02:07.003364 systemd-logind[1367]: Session 7 logged out. Waiting for processes to exit. Oct 2 22:02:07.004525 systemd-logind[1367]: Removed session 7. Oct 2 22:02:07.065540 systemd[1]: Started sshd@5-10.200.20.19:22-10.200.12.6:34418.service. Oct 2 22:02:07.468565 sshd[1712]: Accepted publickey for core from 10.200.12.6 port 34418 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:02:07.470523 sshd[1712]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:02:07.474583 systemd[1]: Started session-8.scope. Oct 2 22:02:07.475798 systemd-logind[1367]: New session 8 of user core. Oct 2 22:02:07.701125 sudo[1716]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 22:02:07.701602 sudo[1716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 22:02:07.704990 sudo[1716]: pam_unix(sudo:session): session closed for user root Oct 2 22:02:07.710801 sudo[1715]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 22:02:07.710993 sudo[1715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 22:02:07.722658 systemd[1]: Stopping audit-rules.service... Oct 2 22:02:07.723000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 22:02:07.727989 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 22:02:07.728045 kernel: audit: type=1305 audit(1696284127.723:177): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 22:02:07.738539 auditctl[1719]: No rules Oct 2 22:02:07.723000 audit[1719]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd7824df0 a2=420 a3=0 items=0 ppid=1 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:07.739187 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 22:02:07.739345 systemd[1]: Stopped audit-rules.service. Oct 2 22:02:07.740779 systemd[1]: Starting audit-rules.service... Oct 2 22:02:07.762314 kernel: audit: type=1300 audit(1696284127.723:177): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd7824df0 a2=420 a3=0 items=0 ppid=1 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:07.723000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 22:02:07.770399 kernel: audit: type=1327 audit(1696284127.723:177): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 22:02:07.770464 kernel: audit: type=1131 audit(1696284127.738:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:07.738000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:07.777870 augenrules[1736]: No rules Oct 2 22:02:07.778778 systemd[1]: Finished audit-rules.service. Oct 2 22:02:07.786826 sudo[1715]: pam_unix(sudo:session): session closed for user root Oct 2 22:02:07.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:07.803182 kernel: audit: type=1130 audit(1696284127.778:179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:07.786000 audit[1715]: USER_END pid=1715 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:07.821736 kernel: audit: type=1106 audit(1696284127.786:180): pid=1715 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:07.786000 audit[1715]: CRED_DISP pid=1715 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:07.838337 kernel: audit: type=1104 audit(1696284127.786:181): pid=1715 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:07.864331 sshd[1712]: pam_unix(sshd:session): session closed for user core Oct 2 22:02:07.864000 audit[1712]: USER_END pid=1712 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:07.888599 systemd[1]: sshd@5-10.200.20.19:22-10.200.12.6:34418.service: Deactivated successfully. Oct 2 22:02:07.864000 audit[1712]: CRED_DISP pid=1712 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:07.907819 kernel: audit: type=1106 audit(1696284127.864:182): pid=1712 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:07.907908 kernel: audit: type=1104 audit(1696284127.864:183): pid=1712 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:07.889291 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 22:02:07.908357 systemd-logind[1367]: Session 8 logged out. Waiting for processes to exit. Oct 2 22:02:07.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.19:22-10.200.12.6:34418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:07.927703 kernel: audit: type=1131 audit(1696284127.888:184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.19:22-10.200.12.6:34418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:07.927899 systemd-logind[1367]: Removed session 8. Oct 2 22:02:07.937919 systemd[1]: Started sshd@6-10.200.20.19:22-10.200.12.6:36190.service. Oct 2 22:02:07.937000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.19:22-10.200.12.6:36190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:08.340000 audit[1742]: USER_ACCT pid=1742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:08.342830 sshd[1742]: Accepted publickey for core from 10.200.12.6 port 36190 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:02:08.342000 audit[1742]: CRED_ACQ pid=1742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:08.342000 audit[1742]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7566480 a2=3 a3=1 items=0 ppid=1 pid=1742 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:08.342000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:02:08.343817 sshd[1742]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:02:08.347660 systemd-logind[1367]: New session 9 of user core. Oct 2 22:02:08.348102 systemd[1]: Started session-9.scope. Oct 2 22:02:08.351000 audit[1742]: USER_START pid=1742 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:08.354000 audit[1744]: CRED_ACQ pid=1744 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:08.572000 audit[1745]: USER_ACCT pid=1745 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:08.573817 sudo[1745]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 22:02:08.573000 audit[1745]: CRED_REFR pid=1745 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:08.574017 sudo[1745]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 22:02:08.574000 audit[1745]: USER_START pid=1745 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:09.334705 systemd[1]: Starting docker.service... Oct 2 22:02:09.383128 env[1760]: time="2023-10-02T22:02:09.383083802Z" level=info msg="Starting up" Oct 2 22:02:09.393962 env[1760]: time="2023-10-02T22:02:09.393934180Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 22:02:09.393962 env[1760]: time="2023-10-02T22:02:09.393956020Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 22:02:09.394049 env[1760]: time="2023-10-02T22:02:09.393974460Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 22:02:09.394049 env[1760]: time="2023-10-02T22:02:09.393984420Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 22:02:09.396031 env[1760]: time="2023-10-02T22:02:09.396001129Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 22:02:09.396031 env[1760]: time="2023-10-02T22:02:09.396024408Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 22:02:09.396123 env[1760]: time="2023-10-02T22:02:09.396037488Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 22:02:09.396123 env[1760]: time="2023-10-02T22:02:09.396045328Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 22:02:09.500179 env[1760]: time="2023-10-02T22:02:09.500133056Z" level=info msg="Loading containers: start." Oct 2 22:02:09.622000 audit[1786]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=1786 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:09.622000 audit[1786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffe7f126d0 a2=0 a3=1 items=0 ppid=1760 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:09.622000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 22:02:09.625000 audit[1788]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=1788 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:09.625000 audit[1788]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffd42b90c0 a2=0 a3=1 items=0 ppid=1760 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:09.625000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 22:02:09.628000 audit[1790]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=1790 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:09.628000 audit[1790]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffec22970 a2=0 a3=1 items=0 ppid=1760 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:09.628000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 22:02:09.631000 audit[1792]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1792 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:09.631000 audit[1792]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe6f91b10 a2=0 a3=1 items=0 ppid=1760 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:09.631000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 22:02:09.634000 audit[1794]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1794 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:09.634000 audit[1794]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff0015070 a2=0 a3=1 items=0 ppid=1760 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:09.634000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 22:02:09.637000 audit[1796]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1796 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:09.637000 audit[1796]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff713a3f0 a2=0 a3=1 items=0 ppid=1760 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:09.637000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 22:02:09.659000 audit[1798]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1798 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:09.659000 audit[1798]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe9c576c0 a2=0 a3=1 items=0 ppid=1760 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:09.659000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 22:02:09.661000 audit[1800]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1800 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:09.661000 audit[1800]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe61547b0 a2=0 a3=1 items=0 ppid=1760 pid=1800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:09.661000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 22:02:09.664000 audit[1802]: NETFILTER_CFG table=filter:13 family=2 entries=2 op=nft_register_chain pid=1802 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:09.664000 audit[1802]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffc47db2c0 a2=0 a3=1 items=0 ppid=1760 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:09.664000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 22:02:09.683000 audit[1806]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_unregister_rule pid=1806 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:09.683000 audit[1806]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffcac1edd0 a2=0 a3=1 items=0 ppid=1760 pid=1806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:09.683000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 22:02:09.684000 audit[1807]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1807 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:09.684000 audit[1807]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffdf9a1fd0 a2=0 a3=1 items=0 ppid=1760 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:09.684000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 22:02:09.748784 kernel: Initializing XFRM netlink socket Oct 2 22:02:09.923413 env[1760]: time="2023-10-02T22:02:09.923319688Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 22:02:10.014000 audit[1814]: NETFILTER_CFG table=nat:16 family=2 entries=2 op=nft_register_chain pid=1814 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:10.014000 audit[1814]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffff4452f30 a2=0 a3=1 items=0 ppid=1760 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:10.014000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 22:02:10.043000 audit[1817]: NETFILTER_CFG table=nat:17 family=2 entries=1 op=nft_register_rule pid=1817 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:10.043000 audit[1817]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffff9ee88b0 a2=0 a3=1 items=0 ppid=1760 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:10.043000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 22:02:10.048000 audit[1820]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_register_rule pid=1820 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:10.048000 audit[1820]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff9e9c850 a2=0 a3=1 items=0 ppid=1760 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:10.048000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 22:02:10.051000 audit[1822]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1822 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:10.051000 audit[1822]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffef657ab0 a2=0 a3=1 items=0 ppid=1760 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:10.051000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 22:02:10.054000 audit[1824]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1824 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:10.054000 audit[1824]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffcbc49040 a2=0 a3=1 items=0 ppid=1760 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:10.054000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 22:02:10.057000 audit[1826]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1826 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:10.057000 audit[1826]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffff7c04f80 a2=0 a3=1 items=0 ppid=1760 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:10.057000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 22:02:10.060000 audit[1828]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1828 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:10.060000 audit[1828]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffffc3172c0 a2=0 a3=1 items=0 ppid=1760 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:10.060000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 22:02:10.063000 audit[1830]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1830 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:10.063000 audit[1830]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffd82957a0 a2=0 a3=1 items=0 ppid=1760 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:10.063000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 22:02:10.066000 audit[1832]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1832 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:10.066000 audit[1832]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffed7aed70 a2=0 a3=1 items=0 ppid=1760 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:10.066000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 22:02:10.069000 audit[1834]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1834 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:10.069000 audit[1834]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=fffff05a49e0 a2=0 a3=1 items=0 ppid=1760 pid=1834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:10.069000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 22:02:10.072000 audit[1836]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1836 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:10.072000 audit[1836]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd85c24e0 a2=0 a3=1 items=0 ppid=1760 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:10.072000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 22:02:10.073902 systemd-networkd[1530]: docker0: Link UP Oct 2 22:02:10.091000 audit[1840]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_unregister_rule pid=1840 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:10.091000 audit[1840]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe7e310d0 a2=0 a3=1 items=0 ppid=1760 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:10.091000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 22:02:10.092000 audit[1841]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1841 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:10.092000 audit[1841]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffefd52f00 a2=0 a3=1 items=0 ppid=1760 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:10.092000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 22:02:10.093980 env[1760]: time="2023-10-02T22:02:10.093948148Z" level=info msg="Loading containers: done." Oct 2 22:02:10.106631 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3242554850-merged.mount: Deactivated successfully. Oct 2 22:02:10.169277 env[1760]: time="2023-10-02T22:02:10.169237987Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 22:02:10.169651 env[1760]: time="2023-10-02T22:02:10.169634665Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 22:02:10.169837 env[1760]: time="2023-10-02T22:02:10.169822944Z" level=info msg="Daemon has completed initialization" Oct 2 22:02:10.205000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:10.205927 systemd[1]: Started docker.service. Oct 2 22:02:10.213320 env[1760]: time="2023-10-02T22:02:10.213125593Z" level=info msg="API listen on /run/docker.sock" Oct 2 22:02:10.235991 systemd[1]: Reloading. Oct 2 22:02:10.311274 /usr/lib/systemd/system-generators/torcx-generator[1887]: time="2023-10-02T22:02:10Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 22:02:10.311628 /usr/lib/systemd/system-generators/torcx-generator[1887]: time="2023-10-02T22:02:10Z" level=info msg="torcx already run" Oct 2 22:02:10.435868 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 22:02:10.435885 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 22:02:10.452503 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit: BPF prog-id=38 op=LOAD Oct 2 22:02:10.513000 audit: BPF prog-id=32 op=UNLOAD Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit: BPF prog-id=39 op=LOAD Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.513000 audit: BPF prog-id=40 op=LOAD Oct 2 22:02:10.513000 audit: BPF prog-id=33 op=UNLOAD Oct 2 22:02:10.513000 audit: BPF prog-id=34 op=UNLOAD Oct 2 22:02:10.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.514000 audit: BPF prog-id=41 op=LOAD Oct 2 22:02:10.514000 audit: BPF prog-id=30 op=UNLOAD Oct 2 22:02:10.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit: BPF prog-id=42 op=LOAD Oct 2 22:02:10.516000 audit: BPF prog-id=27 op=UNLOAD Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit: BPF prog-id=43 op=LOAD Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.516000 audit: BPF prog-id=44 op=LOAD Oct 2 22:02:10.516000 audit: BPF prog-id=28 op=UNLOAD Oct 2 22:02:10.516000 audit: BPF prog-id=29 op=UNLOAD Oct 2 22:02:10.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.517000 audit: BPF prog-id=45 op=LOAD Oct 2 22:02:10.517000 audit: BPF prog-id=35 op=UNLOAD Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit: BPF prog-id=46 op=LOAD Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit: BPF prog-id=47 op=LOAD Oct 2 22:02:10.520000 audit: BPF prog-id=24 op=UNLOAD Oct 2 22:02:10.520000 audit: BPF prog-id=25 op=UNLOAD Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit: BPF prog-id=48 op=LOAD Oct 2 22:02:10.520000 audit: BPF prog-id=31 op=UNLOAD Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit: BPF prog-id=49 op=LOAD Oct 2 22:02:10.521000 audit: BPF prog-id=37 op=UNLOAD Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit: BPF prog-id=50 op=LOAD Oct 2 22:02:10.521000 audit: BPF prog-id=21 op=UNLOAD Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit: BPF prog-id=51 op=LOAD Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:10.521000 audit: BPF prog-id=52 op=LOAD Oct 2 22:02:10.521000 audit: BPF prog-id=22 op=UNLOAD Oct 2 22:02:10.521000 audit: BPF prog-id=23 op=UNLOAD Oct 2 22:02:10.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:10.528582 systemd[1]: Started kubelet.service. Oct 2 22:02:10.619013 kubelet[1947]: E1002 22:02:10.618954 1947 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 22:02:10.620991 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 22:02:10.621114 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 22:02:10.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 22:02:15.438685 env[1377]: time="2023-10-02T22:02:15.438380603Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 22:02:16.516502 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1309695107.mount: Deactivated successfully. Oct 2 22:02:20.370400 env[1377]: time="2023-10-02T22:02:20.370345567Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:20.388527 env[1377]: time="2023-10-02T22:02:20.388475761Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:20.391834 env[1377]: time="2023-10-02T22:02:20.391801583Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:20.395101 env[1377]: time="2023-10-02T22:02:20.395071576Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:20.396004 env[1377]: time="2023-10-02T22:02:20.395972729Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:58571c8a72517919f341c2a8603a9242fe278cd95e62ddebc4cf3efe3e168d99\"" Oct 2 22:02:20.410455 env[1377]: time="2023-10-02T22:02:20.410414808Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 22:02:20.824853 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 22:02:20.825024 systemd[1]: Stopped kubelet.service. Oct 2 22:02:20.847053 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 22:02:20.847166 kernel: audit: type=1130 audit(1696284140.824:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:20.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:20.826486 systemd[1]: Started kubelet.service. Oct 2 22:02:20.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:20.865013 kernel: audit: type=1131 audit(1696284140.824:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:20.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:20.883922 kernel: audit: type=1130 audit(1696284140.825:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:20.922649 kubelet[1971]: E1002 22:02:20.922581 1971 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 22:02:20.925290 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 22:02:20.925414 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 22:02:20.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 22:02:20.944784 kernel: audit: type=1131 audit(1696284140.924:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 22:02:24.312873 env[1377]: time="2023-10-02T22:02:24.312812969Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:24.318361 env[1377]: time="2023-10-02T22:02:24.318339490Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:24.335840 env[1377]: time="2023-10-02T22:02:24.335812345Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:24.343854 env[1377]: time="2023-10-02T22:02:24.343816614Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:24.344557 env[1377]: time="2023-10-02T22:02:24.344530176Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:e1da3e9c4659a618e29cd50e4886012580580648b2fb04105edf183286f34013\"" Oct 2 22:02:24.358352 env[1377]: time="2023-10-02T22:02:24.358319523Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 22:02:26.690330 env[1377]: time="2023-10-02T22:02:26.690273851Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:26.695334 env[1377]: time="2023-10-02T22:02:26.695305979Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:26.701993 env[1377]: time="2023-10-02T22:02:26.701957292Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:26.706210 env[1377]: time="2023-10-02T22:02:26.706184786Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:26.706862 env[1377]: time="2023-10-02T22:02:26.706837283Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:d3203514e67865690cf9b02fb09ac764a9814be5e3178b1aa7a7cb0bd8683803\"" Oct 2 22:02:26.720098 env[1377]: time="2023-10-02T22:02:26.720073279Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 22:02:27.947027 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4169512623.mount: Deactivated successfully. Oct 2 22:02:28.779497 env[1377]: time="2023-10-02T22:02:28.779447880Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:28.786034 env[1377]: time="2023-10-02T22:02:28.785999383Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:28.790617 env[1377]: time="2023-10-02T22:02:28.790577900Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:28.794833 env[1377]: time="2023-10-02T22:02:28.794802709Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:28.795344 env[1377]: time="2023-10-02T22:02:28.795311913Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:0393a046c6ac3c39d56f9b536c02216184f07904e0db26449490d0cb1d1fe343\"" Oct 2 22:02:28.809834 env[1377]: time="2023-10-02T22:02:28.809801192Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 22:02:29.447668 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3970483816.mount: Deactivated successfully. Oct 2 22:02:29.465589 env[1377]: time="2023-10-02T22:02:29.465550227Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:29.471616 env[1377]: time="2023-10-02T22:02:29.471581431Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:29.475810 env[1377]: time="2023-10-02T22:02:29.475778422Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:29.479609 env[1377]: time="2023-10-02T22:02:29.479575190Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:29.480195 env[1377]: time="2023-10-02T22:02:29.480169104Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 22:02:29.493844 env[1377]: time="2023-10-02T22:02:29.493742973Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 22:02:30.378687 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount128455277.mount: Deactivated successfully. Oct 2 22:02:31.074858 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 22:02:31.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:31.075030 systemd[1]: Stopped kubelet.service. Oct 2 22:02:31.076422 systemd[1]: Started kubelet.service. Oct 2 22:02:31.074000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:31.112449 kernel: audit: type=1130 audit(1696284151.074:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:31.112586 kernel: audit: type=1131 audit(1696284151.074:398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:31.112614 kernel: audit: type=1130 audit(1696284151.075:399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:31.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:31.179824 kubelet[1997]: E1002 22:02:31.179775 1997 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 22:02:31.182140 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 22:02:31.181000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 22:02:31.182260 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 22:02:31.200794 kernel: audit: type=1131 audit(1696284151.181:400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 22:02:34.966783 env[1377]: time="2023-10-02T22:02:34.965986038Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:34.972856 env[1377]: time="2023-10-02T22:02:34.972815648Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:34.977411 env[1377]: time="2023-10-02T22:02:34.977377388Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:34.983142 env[1377]: time="2023-10-02T22:02:34.983107458Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:34.983851 env[1377]: time="2023-10-02T22:02:34.983826607Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 22:02:34.997505 env[1377]: time="2023-10-02T22:02:34.997472190Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 22:02:35.748443 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2523814579.mount: Deactivated successfully. Oct 2 22:02:38.136547 env[1377]: time="2023-10-02T22:02:38.136449012Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:38.146294 env[1377]: time="2023-10-02T22:02:38.146247526Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:38.152604 env[1377]: time="2023-10-02T22:02:38.152561761Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:38.163311 env[1377]: time="2023-10-02T22:02:38.163274930Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:38.163925 env[1377]: time="2023-10-02T22:02:38.163897339Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 22:02:41.324726 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Oct 2 22:02:41.324917 systemd[1]: Stopped kubelet.service. Oct 2 22:02:41.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:41.326361 systemd[1]: Started kubelet.service. Oct 2 22:02:41.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:41.375021 kernel: audit: type=1130 audit(1696284161.323:401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:41.375101 kernel: audit: type=1131 audit(1696284161.323:402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:41.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:41.397687 kernel: audit: type=1130 audit(1696284161.323:403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:41.471676 kubelet[2063]: E1002 22:02:41.471613 2063 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 22:02:41.473783 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 22:02:41.473922 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 22:02:41.473000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 22:02:41.494790 kernel: audit: type=1131 audit(1696284161.473:404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 22:02:42.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:42.403922 systemd[1]: Stopped kubelet.service. Oct 2 22:02:42.403000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:42.440441 kernel: audit: type=1130 audit(1696284162.403:405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:42.440520 kernel: audit: type=1131 audit(1696284162.403:406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:42.461399 systemd[1]: Reloading. Oct 2 22:02:42.553508 /usr/lib/systemd/system-generators/torcx-generator[2092]: time="2023-10-02T22:02:42Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 22:02:42.553841 /usr/lib/systemd/system-generators/torcx-generator[2092]: time="2023-10-02T22:02:42Z" level=info msg="torcx already run" Oct 2 22:02:42.655301 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 22:02:42.655318 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 22:02:42.672013 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 22:02:42.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.768225 kernel: audit: type=1400 audit(1696284162.732:407): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.768326 kernel: audit: type=1400 audit(1696284162.732:408): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.768375 kernel: audit: type=1400 audit(1696284162.732:409): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.802817 kernel: audit: type=1400 audit(1696284162.732:410): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.750000 audit: BPF prog-id=53 op=LOAD Oct 2 22:02:42.750000 audit: BPF prog-id=38 op=UNLOAD Oct 2 22:02:42.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.767000 audit: BPF prog-id=54 op=LOAD Oct 2 22:02:42.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.784000 audit: BPF prog-id=55 op=LOAD Oct 2 22:02:42.784000 audit: BPF prog-id=39 op=UNLOAD Oct 2 22:02:42.784000 audit: BPF prog-id=40 op=UNLOAD Oct 2 22:02:42.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.802000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.802000 audit: BPF prog-id=56 op=LOAD Oct 2 22:02:42.802000 audit: BPF prog-id=41 op=UNLOAD Oct 2 22:02:42.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit: BPF prog-id=57 op=LOAD Oct 2 22:02:42.805000 audit: BPF prog-id=42 op=UNLOAD Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.805000 audit: BPF prog-id=58 op=LOAD Oct 2 22:02:42.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.806000 audit: BPF prog-id=59 op=LOAD Oct 2 22:02:42.806000 audit: BPF prog-id=43 op=UNLOAD Oct 2 22:02:42.806000 audit: BPF prog-id=44 op=UNLOAD Oct 2 22:02:42.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.808000 audit: BPF prog-id=60 op=LOAD Oct 2 22:02:42.808000 audit: BPF prog-id=45 op=UNLOAD Oct 2 22:02:42.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit: BPF prog-id=61 op=LOAD Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.811000 audit: BPF prog-id=62 op=LOAD Oct 2 22:02:42.811000 audit: BPF prog-id=46 op=UNLOAD Oct 2 22:02:42.811000 audit: BPF prog-id=47 op=UNLOAD Oct 2 22:02:42.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.812000 audit: BPF prog-id=63 op=LOAD Oct 2 22:02:42.812000 audit: BPF prog-id=48 op=UNLOAD Oct 2 22:02:42.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.813000 audit: BPF prog-id=64 op=LOAD Oct 2 22:02:42.813000 audit: BPF prog-id=49 op=UNLOAD Oct 2 22:02:42.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.814000 audit: BPF prog-id=65 op=LOAD Oct 2 22:02:42.814000 audit: BPF prog-id=50 op=UNLOAD Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit: BPF prog-id=66 op=LOAD Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:42.815000 audit: BPF prog-id=67 op=LOAD Oct 2 22:02:42.815000 audit: BPF prog-id=51 op=UNLOAD Oct 2 22:02:42.816000 audit: BPF prog-id=52 op=UNLOAD Oct 2 22:02:42.843918 systemd[1]: Started kubelet.service. Oct 2 22:02:42.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:42.909837 kubelet[2152]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 22:02:42.909837 kubelet[2152]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 22:02:42.909837 kubelet[2152]: I1002 22:02:42.907140 2152 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 22:02:42.909837 kubelet[2152]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 22:02:42.909837 kubelet[2152]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 22:02:43.334401 kubelet[2152]: I1002 22:02:43.334369 2152 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 22:02:43.334401 kubelet[2152]: I1002 22:02:43.334396 2152 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 22:02:43.334606 kubelet[2152]: I1002 22:02:43.334587 2152 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 22:02:43.337867 kubelet[2152]: I1002 22:02:43.337852 2152 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 22:02:43.338840 kubelet[2152]: E1002 22:02:43.338817 2152 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.20.19:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:43.339858 kubelet[2152]: W1002 22:02:43.339842 2152 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 22:02:43.340332 kubelet[2152]: I1002 22:02:43.340316 2152 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 22:02:43.340604 kubelet[2152]: I1002 22:02:43.340585 2152 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 22:02:43.340676 kubelet[2152]: I1002 22:02:43.340657 2152 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 22:02:43.340755 kubelet[2152]: I1002 22:02:43.340705 2152 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 22:02:43.340755 kubelet[2152]: I1002 22:02:43.340717 2152 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 22:02:43.340872 kubelet[2152]: I1002 22:02:43.340853 2152 state_mem.go:36] "Initialized new in-memory state store" Oct 2 22:02:43.344278 kubelet[2152]: I1002 22:02:43.344255 2152 kubelet.go:398] "Attempting to sync node with API server" Oct 2 22:02:43.344278 kubelet[2152]: I1002 22:02:43.344280 2152 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 22:02:43.344371 kubelet[2152]: I1002 22:02:43.344356 2152 kubelet.go:297] "Adding apiserver pod source" Oct 2 22:02:43.344371 kubelet[2152]: I1002 22:02:43.344367 2152 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 22:02:43.345163 kubelet[2152]: W1002 22:02:43.345127 2152 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-02d4509438&limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:43.345263 kubelet[2152]: E1002 22:02:43.345252 2152 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-02d4509438&limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:43.345407 kubelet[2152]: I1002 22:02:43.345395 2152 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 22:02:43.345973 kubelet[2152]: W1002 22:02:43.345959 2152 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 22:02:43.346417 kubelet[2152]: I1002 22:02:43.346402 2152 server.go:1186] "Started kubelet" Oct 2 22:02:43.346000 audit[2152]: AVC avc: denied { mac_admin } for pid=2152 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:43.346000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 22:02:43.346000 audit[2152]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a6baa0 a1=4000c26738 a2=4000a6ba70 a3=25 items=0 ppid=1 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.346000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 22:02:43.348004 kubelet[2152]: I1002 22:02:43.347989 2152 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 22:02:43.347000 audit[2152]: AVC avc: denied { mac_admin } for pid=2152 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:43.347000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 22:02:43.347000 audit[2152]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40007ba960 a1=4000c26750 a2=4000a6bb30 a3=25 items=0 ppid=1 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.347000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 22:02:43.348237 kubelet[2152]: I1002 22:02:43.348223 2152 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 22:02:43.348340 kubelet[2152]: I1002 22:02:43.348329 2152 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 22:02:43.350033 kubelet[2152]: W1002 22:02:43.349986 2152 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:43.350033 kubelet[2152]: E1002 22:02:43.350033 2152 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:43.350478 kubelet[2152]: E1002 22:02:43.350456 2152 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 22:02:43.350534 kubelet[2152]: E1002 22:02:43.350481 2152 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 22:02:43.351650 kubelet[2152]: I1002 22:02:43.351615 2152 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 22:02:43.352182 kubelet[2152]: I1002 22:02:43.352163 2152 server.go:451] "Adding debug handlers to kubelet server" Oct 2 22:02:43.354074 kubelet[2152]: E1002 22:02:43.353984 2152 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-02d4509438.178a69759261bc23", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-02d4509438", UID:"ci-3510.3.0-a-02d4509438", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-02d4509438"}, FirstTimestamp:time.Date(2023, time.October, 2, 22, 2, 43, 346381859, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 22, 2, 43, 346381859, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.20.19:6443/api/v1/namespaces/default/events": dial tcp 10.200.20.19:6443: connect: connection refused'(may retry after sleeping) Oct 2 22:02:43.354657 kubelet[2152]: I1002 22:02:43.354509 2152 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 22:02:43.354657 kubelet[2152]: I1002 22:02:43.354581 2152 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 22:02:43.354976 kubelet[2152]: W1002 22:02:43.354934 2152 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:43.354976 kubelet[2152]: E1002 22:02:43.354974 2152 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:43.356048 kubelet[2152]: E1002 22:02:43.355999 2152 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.200.20.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-02d4509438?timeout=10s": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:43.356000 audit[2163]: NETFILTER_CFG table=mangle:29 family=2 entries=2 op=nft_register_chain pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.356000 audit[2163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffec00a180 a2=0 a3=1 items=0 ppid=2152 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.356000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 22:02:43.357000 audit[2164]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.357000 audit[2164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffcc34850 a2=0 a3=1 items=0 ppid=2152 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.357000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 22:02:43.360000 audit[2166]: NETFILTER_CFG table=filter:31 family=2 entries=2 op=nft_register_chain pid=2166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.360000 audit[2166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffffa595020 a2=0 a3=1 items=0 ppid=2152 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.360000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 22:02:43.364000 audit[2168]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.364000 audit[2168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff47dfec0 a2=0 a3=1 items=0 ppid=2152 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.364000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 22:02:43.415000 audit[2173]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.415000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffec2bfb80 a2=0 a3=1 items=0 ppid=2152 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.415000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 22:02:43.417539 kubelet[2152]: I1002 22:02:43.417507 2152 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 22:02:43.417643 kubelet[2152]: I1002 22:02:43.417634 2152 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 22:02:43.417726 kubelet[2152]: I1002 22:02:43.417718 2152 state_mem.go:36] "Initialized new in-memory state store" Oct 2 22:02:43.418000 audit[2176]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.418000 audit[2176]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd3f40b80 a2=0 a3=1 items=0 ppid=2152 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.418000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 22:02:43.422121 kubelet[2152]: I1002 22:02:43.422106 2152 policy_none.go:49] "None policy: Start" Oct 2 22:02:43.422832 kubelet[2152]: I1002 22:02:43.422809 2152 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 22:02:43.422907 kubelet[2152]: I1002 22:02:43.422838 2152 state_mem.go:35] "Initializing new in-memory state store" Oct 2 22:02:43.429568 systemd[1]: Created slice kubepods.slice. Oct 2 22:02:43.433372 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 22:02:43.435874 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 22:02:43.440492 kubelet[2152]: I1002 22:02:43.440463 2152 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 22:02:43.439000 audit[2152]: AVC avc: denied { mac_admin } for pid=2152 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:43.439000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 22:02:43.439000 audit[2152]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40009a04b0 a1=4000ddf5c0 a2=40009a0480 a3=25 items=0 ppid=1 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.439000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 22:02:43.440698 kubelet[2152]: I1002 22:02:43.440543 2152 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 22:02:43.440725 kubelet[2152]: I1002 22:02:43.440705 2152 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 22:02:43.441990 kubelet[2152]: E1002 22:02:43.441615 2152 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-02d4509438\" not found" Oct 2 22:02:43.453000 audit[2179]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_rule pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.453000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe16af570 a2=0 a3=1 items=0 ppid=2152 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.453000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 22:02:43.456235 kubelet[2152]: I1002 22:02:43.456211 2152 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-02d4509438" Oct 2 22:02:43.456595 kubelet[2152]: E1002 22:02:43.456577 2152 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.19:6443/api/v1/nodes\": dial tcp 10.200.20.19:6443: connect: connection refused" node="ci-3510.3.0-a-02d4509438" Oct 2 22:02:43.532000 audit[2182]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_rule pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.532000 audit[2182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffe2669a70 a2=0 a3=1 items=0 ppid=2152 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.532000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 22:02:43.534000 audit[2183]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_chain pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.534000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffeac0f620 a2=0 a3=1 items=0 ppid=2152 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.534000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 22:02:43.535000 audit[2184]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.535000 audit[2184]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff9f69820 a2=0 a3=1 items=0 ppid=2152 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.535000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 22:02:43.539000 audit[2186]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.539000 audit[2186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffffe0c7a00 a2=0 a3=1 items=0 ppid=2152 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.539000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 22:02:43.542000 audit[2188]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.542000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=fffff23d6ed0 a2=0 a3=1 items=0 ppid=2152 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.542000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 22:02:43.546000 audit[2190]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_rule pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.546000 audit[2190]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffe2093a30 a2=0 a3=1 items=0 ppid=2152 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.546000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 22:02:43.549000 audit[2192]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_rule pid=2192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.549000 audit[2192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffda896460 a2=0 a3=1 items=0 ppid=2152 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.549000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 22:02:43.553000 audit[2194]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.553000 audit[2194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=540 a0=3 a1=fffffb921080 a2=0 a3=1 items=0 ppid=2152 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.553000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 22:02:43.554675 kubelet[2152]: I1002 22:02:43.554656 2152 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 22:02:43.555000 audit[2195]: NETFILTER_CFG table=mangle:44 family=10 entries=2 op=nft_register_chain pid=2195 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:02:43.555000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff5343950 a2=0 a3=1 items=0 ppid=2152 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.555000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 22:02:43.555000 audit[2196]: NETFILTER_CFG table=mangle:45 family=2 entries=1 op=nft_register_chain pid=2196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.555000 audit[2196]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffea7ce6a0 a2=0 a3=1 items=0 ppid=2152 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.555000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 22:02:43.557000 audit[2197]: NETFILTER_CFG table=nat:46 family=2 entries=1 op=nft_register_chain pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.557000 audit[2197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff343aa10 a2=0 a3=1 items=0 ppid=2152 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.557000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 22:02:43.557000 audit[2198]: NETFILTER_CFG table=nat:47 family=10 entries=2 op=nft_register_chain pid=2198 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:02:43.557000 audit[2198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc54121b0 a2=0 a3=1 items=0 ppid=2152 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.557000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 22:02:43.558000 audit[2199]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_chain pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:43.558000 audit[2199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdee87850 a2=0 a3=1 items=0 ppid=2152 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.558000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 22:02:43.559807 kubelet[2152]: E1002 22:02:43.559738 2152 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.200.20.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-02d4509438?timeout=10s": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:43.561000 audit[2201]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_rule pid=2201 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:02:43.561000 audit[2201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd3f1c490 a2=0 a3=1 items=0 ppid=2152 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.561000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 22:02:43.562000 audit[2202]: NETFILTER_CFG table=filter:50 family=10 entries=2 op=nft_register_chain pid=2202 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:02:43.562000 audit[2202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffe63d9480 a2=0 a3=1 items=0 ppid=2152 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.562000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 22:02:43.566000 audit[2204]: NETFILTER_CFG table=filter:51 family=10 entries=1 op=nft_register_rule pid=2204 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:02:43.566000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=fffff53ca690 a2=0 a3=1 items=0 ppid=2152 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.566000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 22:02:43.568000 audit[2205]: NETFILTER_CFG table=nat:52 family=10 entries=1 op=nft_register_chain pid=2205 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:02:43.568000 audit[2205]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffa62b910 a2=0 a3=1 items=0 ppid=2152 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.568000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 22:02:43.569000 audit[2206]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:02:43.569000 audit[2206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffd45d210 a2=0 a3=1 items=0 ppid=2152 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.569000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 22:02:43.572000 audit[2208]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:02:43.572000 audit[2208]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffc76eeff0 a2=0 a3=1 items=0 ppid=2152 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.572000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 22:02:43.576000 audit[2210]: NETFILTER_CFG table=nat:55 family=10 entries=2 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:02:43.576000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffed72f860 a2=0 a3=1 items=0 ppid=2152 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.576000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 22:02:43.579000 audit[2212]: NETFILTER_CFG table=nat:56 family=10 entries=1 op=nft_register_rule pid=2212 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:02:43.579000 audit[2212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=fffffdaa7c60 a2=0 a3=1 items=0 ppid=2152 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.579000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 22:02:43.583000 audit[2214]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_rule pid=2214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:02:43.583000 audit[2214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=fffff7042750 a2=0 a3=1 items=0 ppid=2152 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.583000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 22:02:43.609000 audit[2216]: NETFILTER_CFG table=nat:58 family=10 entries=1 op=nft_register_rule pid=2216 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:02:43.609000 audit[2216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=556 a0=3 a1=ffffd9acf060 a2=0 a3=1 items=0 ppid=2152 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.609000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 22:02:43.610512 kubelet[2152]: I1002 22:02:43.610482 2152 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 22:02:43.610512 kubelet[2152]: I1002 22:02:43.610507 2152 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 22:02:43.610610 kubelet[2152]: I1002 22:02:43.610524 2152 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 22:02:43.610610 kubelet[2152]: E1002 22:02:43.610564 2152 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 22:02:43.611213 kubelet[2152]: W1002 22:02:43.611001 2152 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:43.611213 kubelet[2152]: E1002 22:02:43.611044 2152 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:43.612000 audit[2217]: NETFILTER_CFG table=mangle:59 family=10 entries=1 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:02:43.612000 audit[2217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff3fac310 a2=0 a3=1 items=0 ppid=2152 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.612000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 22:02:43.613000 audit[2218]: NETFILTER_CFG table=nat:60 family=10 entries=1 op=nft_register_chain pid=2218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:02:43.613000 audit[2218]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe9a66620 a2=0 a3=1 items=0 ppid=2152 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.613000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 22:02:43.615000 audit[2219]: NETFILTER_CFG table=filter:61 family=10 entries=1 op=nft_register_chain pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:02:43.615000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc0c71280 a2=0 a3=1 items=0 ppid=2152 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:43.615000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 22:02:43.658493 kubelet[2152]: I1002 22:02:43.658456 2152 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-02d4509438" Oct 2 22:02:43.658991 kubelet[2152]: E1002 22:02:43.658926 2152 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.19:6443/api/v1/nodes\": dial tcp 10.200.20.19:6443: connect: connection refused" node="ci-3510.3.0-a-02d4509438" Oct 2 22:02:43.711088 kubelet[2152]: I1002 22:02:43.711052 2152 topology_manager.go:210] "Topology Admit Handler" Oct 2 22:02:43.712773 kubelet[2152]: I1002 22:02:43.712732 2152 topology_manager.go:210] "Topology Admit Handler" Oct 2 22:02:43.713919 kubelet[2152]: I1002 22:02:43.713893 2152 topology_manager.go:210] "Topology Admit Handler" Oct 2 22:02:43.715383 kubelet[2152]: I1002 22:02:43.715035 2152 status_manager.go:698] "Failed to get status for pod" podUID=7cd26ac463201e236ef84b740aa89e6a pod="kube-system/kube-scheduler-ci-3510.3.0-a-02d4509438" err="Get \"https://10.200.20.19:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510.3.0-a-02d4509438\": dial tcp 10.200.20.19:6443: connect: connection refused" Oct 2 22:02:43.716016 kubelet[2152]: I1002 22:02:43.716000 2152 status_manager.go:698] "Failed to get status for pod" podUID=5823838bb67fe64a218f542b0f6bd660 pod="kube-system/kube-apiserver-ci-3510.3.0-a-02d4509438" err="Get \"https://10.200.20.19:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510.3.0-a-02d4509438\": dial tcp 10.200.20.19:6443: connect: connection refused" Oct 2 22:02:43.717224 kubelet[2152]: I1002 22:02:43.717007 2152 status_manager.go:698] "Failed to get status for pod" podUID=8660efb06a697c9168a4b8c5f2478887 pod="kube-system/kube-controller-manager-ci-3510.3.0-a-02d4509438" err="Get \"https://10.200.20.19:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510.3.0-a-02d4509438\": dial tcp 10.200.20.19:6443: connect: connection refused" Oct 2 22:02:43.719488 systemd[1]: Created slice kubepods-burstable-pod7cd26ac463201e236ef84b740aa89e6a.slice. Oct 2 22:02:43.729182 systemd[1]: Created slice kubepods-burstable-pod5823838bb67fe64a218f542b0f6bd660.slice. Oct 2 22:02:43.741965 systemd[1]: Created slice kubepods-burstable-pod8660efb06a697c9168a4b8c5f2478887.slice. Oct 2 22:02:43.755883 kubelet[2152]: I1002 22:02:43.755845 2152 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7cd26ac463201e236ef84b740aa89e6a-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-02d4509438\" (UID: \"7cd26ac463201e236ef84b740aa89e6a\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-02d4509438" Oct 2 22:02:43.755956 kubelet[2152]: I1002 22:02:43.755903 2152 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5823838bb67fe64a218f542b0f6bd660-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-02d4509438\" (UID: \"5823838bb67fe64a218f542b0f6bd660\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-02d4509438" Oct 2 22:02:43.755956 kubelet[2152]: I1002 22:02:43.755926 2152 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5823838bb67fe64a218f542b0f6bd660-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-02d4509438\" (UID: \"5823838bb67fe64a218f542b0f6bd660\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-02d4509438" Oct 2 22:02:43.756011 kubelet[2152]: I1002 22:02:43.755977 2152 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8660efb06a697c9168a4b8c5f2478887-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-02d4509438\" (UID: \"8660efb06a697c9168a4b8c5f2478887\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-02d4509438" Oct 2 22:02:43.756011 kubelet[2152]: I1002 22:02:43.756000 2152 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5823838bb67fe64a218f542b0f6bd660-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-02d4509438\" (UID: \"5823838bb67fe64a218f542b0f6bd660\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-02d4509438" Oct 2 22:02:43.756061 kubelet[2152]: I1002 22:02:43.756052 2152 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8660efb06a697c9168a4b8c5f2478887-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-02d4509438\" (UID: \"8660efb06a697c9168a4b8c5f2478887\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-02d4509438" Oct 2 22:02:43.756085 kubelet[2152]: I1002 22:02:43.756074 2152 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/8660efb06a697c9168a4b8c5f2478887-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-02d4509438\" (UID: \"8660efb06a697c9168a4b8c5f2478887\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-02d4509438" Oct 2 22:02:43.756147 kubelet[2152]: I1002 22:02:43.756129 2152 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8660efb06a697c9168a4b8c5f2478887-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-02d4509438\" (UID: \"8660efb06a697c9168a4b8c5f2478887\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-02d4509438" Oct 2 22:02:43.756179 kubelet[2152]: I1002 22:02:43.756158 2152 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8660efb06a697c9168a4b8c5f2478887-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-02d4509438\" (UID: \"8660efb06a697c9168a4b8c5f2478887\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-02d4509438" Oct 2 22:02:43.961719 kubelet[2152]: E1002 22:02:43.960278 2152 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.200.20.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-02d4509438?timeout=10s": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:44.027516 env[1377]: time="2023-10-02T22:02:44.027246147Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-02d4509438,Uid:7cd26ac463201e236ef84b740aa89e6a,Namespace:kube-system,Attempt:0,}" Oct 2 22:02:44.040530 env[1377]: time="2023-10-02T22:02:44.040481077Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-02d4509438,Uid:5823838bb67fe64a218f542b0f6bd660,Namespace:kube-system,Attempt:0,}" Oct 2 22:02:44.044528 env[1377]: time="2023-10-02T22:02:44.044422207Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-02d4509438,Uid:8660efb06a697c9168a4b8c5f2478887,Namespace:kube-system,Attempt:0,}" Oct 2 22:02:44.060201 kubelet[2152]: I1002 22:02:44.060180 2152 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-02d4509438" Oct 2 22:02:44.060752 kubelet[2152]: E1002 22:02:44.060737 2152 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.19:6443/api/v1/nodes\": dial tcp 10.200.20.19:6443: connect: connection refused" node="ci-3510.3.0-a-02d4509438" Oct 2 22:02:44.300371 kubelet[2152]: W1002 22:02:44.299939 2152 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:44.300371 kubelet[2152]: E1002 22:02:44.299996 2152 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:44.465993 kubelet[2152]: W1002 22:02:44.465956 2152 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:44.465993 kubelet[2152]: E1002 22:02:44.465996 2152 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:44.472404 kubelet[2152]: W1002 22:02:44.472362 2152 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:44.472459 kubelet[2152]: E1002 22:02:44.472408 2152 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:44.739680 kubelet[2152]: W1002 22:02:44.739623 2152 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-02d4509438&limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:44.739680 kubelet[2152]: E1002 22:02:44.739681 2152 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-02d4509438&limit=500&resourceVersion=0": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:44.761275 kubelet[2152]: E1002 22:02:44.761243 2152 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.200.20.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-02d4509438?timeout=10s": dial tcp 10.200.20.19:6443: connect: connection refused Oct 2 22:02:44.779945 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2641220282.mount: Deactivated successfully. Oct 2 22:02:44.802044 env[1377]: time="2023-10-02T22:02:44.802004929Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:44.817143 env[1377]: time="2023-10-02T22:02:44.817114754Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:44.822965 env[1377]: time="2023-10-02T22:02:44.822934258Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:44.827929 env[1377]: time="2023-10-02T22:02:44.827883168Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:44.833205 env[1377]: time="2023-10-02T22:02:44.833179604Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:44.840749 env[1377]: time="2023-10-02T22:02:44.840718458Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:44.845457 env[1377]: time="2023-10-02T22:02:44.845426312Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:44.848661 env[1377]: time="2023-10-02T22:02:44.848623716Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:44.857682 env[1377]: time="2023-10-02T22:02:44.857645063Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:44.861443 env[1377]: time="2023-10-02T22:02:44.861225669Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:44.862307 kubelet[2152]: I1002 22:02:44.862279 2152 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-02d4509438" Oct 2 22:02:44.862670 kubelet[2152]: E1002 22:02:44.862650 2152 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.19:6443/api/v1/nodes\": dial tcp 10.200.20.19:6443: connect: connection refused" node="ci-3510.3.0-a-02d4509438" Oct 2 22:02:44.868696 env[1377]: time="2023-10-02T22:02:44.868666653Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:44.871908 env[1377]: time="2023-10-02T22:02:44.871884655Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:44.926477 env[1377]: time="2023-10-02T22:02:44.926408380Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 22:02:44.926660 env[1377]: time="2023-10-02T22:02:44.926448216Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 22:02:44.926660 env[1377]: time="2023-10-02T22:02:44.926458775Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 22:02:44.926847 env[1377]: time="2023-10-02T22:02:44.926671834Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/523743e12d94a2facd1672fbd063bf1566fae13f09ed7b54399c9ef5c455382e pid=2228 runtime=io.containerd.runc.v2 Oct 2 22:02:44.946538 systemd[1]: Started cri-containerd-523743e12d94a2facd1672fbd063bf1566fae13f09ed7b54399c9ef5c455382e.scope. Oct 2 22:02:44.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.958000 audit: BPF prog-id=68 op=LOAD Oct 2 22:02:44.960000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.960000 audit[2238]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2228 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:44.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532333734336531326439346132666163643136373266626430363362 Oct 2 22:02:44.960000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.960000 audit[2238]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2228 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:44.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532333734336531326439346132666163643136373266626430363362 Oct 2 22:02:44.961000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.961000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.961000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.961000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.961000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.961000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.961000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.961000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.961000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.961000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.961000 audit: BPF prog-id=69 op=LOAD Oct 2 22:02:44.961000 audit[2238]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2228 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:44.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532333734336531326439346132666163643136373266626430363362 Oct 2 22:02:44.962000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.962000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.962000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.962000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.962000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.962000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.962000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.962000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.962000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.962000 audit: BPF prog-id=70 op=LOAD Oct 2 22:02:44.962000 audit[2238]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2228 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:44.962000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532333734336531326439346132666163643136373266626430363362 Oct 2 22:02:44.964000 audit: BPF prog-id=70 op=UNLOAD Oct 2 22:02:44.964000 audit: BPF prog-id=69 op=UNLOAD Oct 2 22:02:44.964000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.964000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.964000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.964000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.964000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.964000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.964000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.964000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.964000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.964000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:44.964000 audit: BPF prog-id=71 op=LOAD Oct 2 22:02:44.964000 audit[2238]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2228 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:44.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532333734336531326439346132666163643136373266626430363362 Oct 2 22:02:44.987267 env[1377]: time="2023-10-02T22:02:44.987210564Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 22:02:44.987419 env[1377]: time="2023-10-02T22:02:44.987396305Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 22:02:44.987516 env[1377]: time="2023-10-02T22:02:44.987495416Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 22:02:44.987986 env[1377]: time="2023-10-02T22:02:44.987944611Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4d0cedf51b4551a9ed9f9b3063e1f0a5d905030bf31207c1a6b166c5f9612963 pid=2271 runtime=io.containerd.runc.v2 Oct 2 22:02:44.991276 env[1377]: time="2023-10-02T22:02:44.991168492Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 22:02:44.991276 env[1377]: time="2023-10-02T22:02:44.991201729Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 22:02:44.991276 env[1377]: time="2023-10-02T22:02:44.991211568Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 22:02:44.993473 env[1377]: time="2023-10-02T22:02:44.993423469Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/acb81f9bb5da279a4adb0a4018ba6197cd447be645be44335ac2c040371cb343 pid=2267 runtime=io.containerd.runc.v2 Oct 2 22:02:44.996734 env[1377]: time="2023-10-02T22:02:44.996693265Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-02d4509438,Uid:7cd26ac463201e236ef84b740aa89e6a,Namespace:kube-system,Attempt:0,} returns sandbox id \"523743e12d94a2facd1672fbd063bf1566fae13f09ed7b54399c9ef5c455382e\"" Oct 2 22:02:45.000448 env[1377]: time="2023-10-02T22:02:45.000418337Z" level=info msg="CreateContainer within sandbox \"523743e12d94a2facd1672fbd063bf1566fae13f09ed7b54399c9ef5c455382e\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 22:02:45.014756 systemd[1]: Started cri-containerd-acb81f9bb5da279a4adb0a4018ba6197cd447be645be44335ac2c040371cb343.scope. Oct 2 22:02:45.018811 systemd[1]: Started cri-containerd-4d0cedf51b4551a9ed9f9b3063e1f0a5d905030bf31207c1a6b166c5f9612963.scope. Oct 2 22:02:45.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.044000 audit: BPF prog-id=72 op=LOAD Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { bpf } for pid=2291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2271 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464306365646635316234353531613965643966396233303633653166 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2271 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464306365646635316234353531613965643966396233303633653166 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { bpf } for pid=2291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { bpf } for pid=2291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { bpf } for pid=2291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { bpf } for pid=2291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { bpf } for pid=2291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit: BPF prog-id=73 op=LOAD Oct 2 22:02:45.045000 audit[2291]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2271 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464306365646635316234353531613965643966396233303633653166 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { bpf } for pid=2291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { bpf } for pid=2291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { bpf } for pid=2291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { bpf } for pid=2291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit: BPF prog-id=74 op=LOAD Oct 2 22:02:45.045000 audit[2291]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2271 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464306365646635316234353531613965643966396233303633653166 Oct 2 22:02:45.045000 audit: BPF prog-id=74 op=UNLOAD Oct 2 22:02:45.045000 audit: BPF prog-id=73 op=UNLOAD Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { bpf } for pid=2291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { bpf } for pid=2291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { bpf } for pid=2291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { perfmon } for pid=2291 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { bpf } for pid=2291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit[2291]: AVC avc: denied { bpf } for pid=2291 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.045000 audit: BPF prog-id=75 op=LOAD Oct 2 22:02:45.045000 audit[2291]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2271 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464306365646635316234353531613965643966396233303633653166 Oct 2 22:02:45.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.046000 audit: BPF prog-id=76 op=LOAD Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2267 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163623831663962623564613237396134616462306134303138626136 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2267 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163623831663962623564613237396134616462306134303138626136 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit: BPF prog-id=77 op=LOAD Oct 2 22:02:45.047000 audit[2297]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2267 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163623831663962623564613237396134616462306134303138626136 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit: BPF prog-id=78 op=LOAD Oct 2 22:02:45.047000 audit[2297]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2267 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163623831663962623564613237396134616462306134303138626136 Oct 2 22:02:45.047000 audit: BPF prog-id=78 op=UNLOAD Oct 2 22:02:45.047000 audit: BPF prog-id=77 op=UNLOAD Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { perfmon } for pid=2297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit[2297]: AVC avc: denied { bpf } for pid=2297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.047000 audit: BPF prog-id=79 op=LOAD Oct 2 22:02:45.047000 audit[2297]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2267 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163623831663962623564613237396134616462306134303138626136 Oct 2 22:02:45.057421 env[1377]: time="2023-10-02T22:02:45.057382635Z" level=info msg="CreateContainer within sandbox \"523743e12d94a2facd1672fbd063bf1566fae13f09ed7b54399c9ef5c455382e\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"7b59da32776b09c9785040b9f05bce75e28f3994a683c3d4970c31086b5b5207\"" Oct 2 22:02:45.058364 env[1377]: time="2023-10-02T22:02:45.058326944Z" level=info msg="StartContainer for \"7b59da32776b09c9785040b9f05bce75e28f3994a683c3d4970c31086b5b5207\"" Oct 2 22:02:45.085975 env[1377]: time="2023-10-02T22:02:45.085935597Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-02d4509438,Uid:5823838bb67fe64a218f542b0f6bd660,Namespace:kube-system,Attempt:0,} returns sandbox id \"4d0cedf51b4551a9ed9f9b3063e1f0a5d905030bf31207c1a6b166c5f9612963\"" Oct 2 22:02:45.089354 env[1377]: time="2023-10-02T22:02:45.088442435Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-02d4509438,Uid:8660efb06a697c9168a4b8c5f2478887,Namespace:kube-system,Attempt:0,} returns sandbox id \"acb81f9bb5da279a4adb0a4018ba6197cd447be645be44335ac2c040371cb343\"" Oct 2 22:02:45.089938 env[1377]: time="2023-10-02T22:02:45.089585325Z" level=info msg="CreateContainer within sandbox \"4d0cedf51b4551a9ed9f9b3063e1f0a5d905030bf31207c1a6b166c5f9612963\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 22:02:45.091346 env[1377]: time="2023-10-02T22:02:45.091321397Z" level=info msg="CreateContainer within sandbox \"acb81f9bb5da279a4adb0a4018ba6197cd447be645be44335ac2c040371cb343\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 22:02:45.098832 systemd[1]: Started cri-containerd-7b59da32776b09c9785040b9f05bce75e28f3994a683c3d4970c31086b5b5207.scope. Oct 2 22:02:45.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.117000 audit: BPF prog-id=80 op=LOAD Oct 2 22:02:45.118000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.118000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2228 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762353964613332373736623039633937383530343062396630356263 Oct 2 22:02:45.118000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.118000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2228 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762353964613332373736623039633937383530343062396630356263 Oct 2 22:02:45.118000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.118000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.118000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.118000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.118000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.118000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.118000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.118000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.118000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.118000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.118000 audit: BPF prog-id=81 op=LOAD Oct 2 22:02:45.118000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2228 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762353964613332373736623039633937383530343062396630356263 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit: BPF prog-id=82 op=LOAD Oct 2 22:02:45.119000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2228 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762353964613332373736623039633937383530343062396630356263 Oct 2 22:02:45.119000 audit: BPF prog-id=82 op=UNLOAD Oct 2 22:02:45.119000 audit: BPF prog-id=81 op=UNLOAD Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.119000 audit: BPF prog-id=83 op=LOAD Oct 2 22:02:45.119000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2228 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762353964613332373736623039633937383530343062396630356263 Oct 2 22:02:45.156211 env[1377]: time="2023-10-02T22:02:45.156173254Z" level=info msg="StartContainer for \"7b59da32776b09c9785040b9f05bce75e28f3994a683c3d4970c31086b5b5207\" returns successfully" Oct 2 22:02:45.173818 env[1377]: time="2023-10-02T22:02:45.173779594Z" level=info msg="CreateContainer within sandbox \"4d0cedf51b4551a9ed9f9b3063e1f0a5d905030bf31207c1a6b166c5f9612963\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"737f46008b551f76fb83e8e5be0e787c2f07383a5fff0b56fd823131ba231b91\"" Oct 2 22:02:45.176968 env[1377]: time="2023-10-02T22:02:45.176924330Z" level=info msg="StartContainer for \"737f46008b551f76fb83e8e5be0e787c2f07383a5fff0b56fd823131ba231b91\"" Oct 2 22:02:45.181696 env[1377]: time="2023-10-02T22:02:45.181667912Z" level=info msg="CreateContainer within sandbox \"acb81f9bb5da279a4adb0a4018ba6197cd447be645be44335ac2c040371cb343\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"90477bfc81bc5289f650d9bc8a6efb597e16e34eb6092807405683b95d5b04fe\"" Oct 2 22:02:45.182202 env[1377]: time="2023-10-02T22:02:45.182172064Z" level=info msg="StartContainer for \"90477bfc81bc5289f650d9bc8a6efb597e16e34eb6092807405683b95d5b04fe\"" Oct 2 22:02:45.213215 systemd[1]: Started cri-containerd-737f46008b551f76fb83e8e5be0e787c2f07383a5fff0b56fd823131ba231b91.scope. Oct 2 22:02:45.224418 systemd[1]: Started cri-containerd-90477bfc81bc5289f650d9bc8a6efb597e16e34eb6092807405683b95d5b04fe.scope. Oct 2 22:02:45.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.248000 audit: BPF prog-id=84 op=LOAD Oct 2 22:02:45.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit: BPF prog-id=85 op=LOAD Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { bpf } for pid=2394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2267 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.251000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930343737626663383162633532383966363530643962633861366566 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2267 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.251000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930343737626663383162633532383966363530643962633861366566 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { bpf } for pid=2394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { bpf } for pid=2394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { bpf } for pid=2394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { bpf } for pid=2394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { bpf } for pid=2394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit: BPF prog-id=86 op=LOAD Oct 2 22:02:45.251000 audit[2394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2267 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.251000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930343737626663383162633532383966363530643962633861366566 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { bpf } for pid=2394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { bpf } for pid=2394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { bpf } for pid=2394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit[2394]: AVC avc: denied { bpf } for pid=2394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.251000 audit: BPF prog-id=87 op=LOAD Oct 2 22:02:45.251000 audit[2394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2267 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.251000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930343737626663383162633532383966363530643962633861366566 Oct 2 22:02:45.252000 audit: BPF prog-id=87 op=UNLOAD Oct 2 22:02:45.252000 audit: BPF prog-id=86 op=UNLOAD Oct 2 22:02:45.252000 audit[2394]: AVC avc: denied { bpf } for pid=2394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.252000 audit[2394]: AVC avc: denied { bpf } for pid=2394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.252000 audit[2394]: AVC avc: denied { bpf } for pid=2394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.252000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.252000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.252000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.252000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.252000 audit[2394]: AVC avc: denied { perfmon } for pid=2394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.252000 audit[2394]: AVC avc: denied { bpf } for pid=2394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.252000 audit[2394]: AVC avc: denied { bpf } for pid=2394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.252000 audit: BPF prog-id=88 op=LOAD Oct 2 22:02:45.252000 audit[2394]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2267 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930343737626663383162633532383966363530643962633861366566 Oct 2 22:02:45.253000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.253000 audit[2393]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2271 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733376634363030386235353166373666623833653865356265306537 Oct 2 22:02:45.253000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.253000 audit[2393]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2271 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733376634363030386235353166373666623833653865356265306537 Oct 2 22:02:45.253000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.253000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.253000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.253000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.253000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.253000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.253000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.253000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.253000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.253000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.253000 audit: BPF prog-id=89 op=LOAD Oct 2 22:02:45.253000 audit[2393]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2271 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733376634363030386235353166373666623833653865356265306537 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit: BPF prog-id=90 op=LOAD Oct 2 22:02:45.254000 audit[2393]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2271 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733376634363030386235353166373666623833653865356265306537 Oct 2 22:02:45.254000 audit: BPF prog-id=90 op=UNLOAD Oct 2 22:02:45.254000 audit: BPF prog-id=89 op=UNLOAD Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:45.254000 audit: BPF prog-id=91 op=LOAD Oct 2 22:02:45.254000 audit[2393]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2271 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:45.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733376634363030386235353166373666623833653865356265306537 Oct 2 22:02:45.295168 env[1377]: time="2023-10-02T22:02:45.295130675Z" level=info msg="StartContainer for \"90477bfc81bc5289f650d9bc8a6efb597e16e34eb6092807405683b95d5b04fe\" returns successfully" Oct 2 22:02:45.298479 env[1377]: time="2023-10-02T22:02:45.298450754Z" level=info msg="StartContainer for \"737f46008b551f76fb83e8e5be0e787c2f07383a5fff0b56fd823131ba231b91\" returns successfully" Oct 2 22:02:46.464622 kubelet[2152]: I1002 22:02:46.464600 2152 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-02d4509438" Oct 2 22:02:48.212687 kernel: kauditd_printk_skb: 622 callbacks suppressed Oct 2 22:02:48.212824 kernel: audit: type=1400 audit(1696284168.181:724): avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:48.181000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:48.203000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:48.245654 kernel: audit: type=1400 audit(1696284168.203:725): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:48.203000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=400baae000 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:02:48.282497 kernel: audit: type=1300 audit(1696284168.203:725): arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=400baae000 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:02:48.203000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:02:48.313238 kernel: audit: type=1327 audit(1696284168.203:725): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:02:48.203000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:48.341517 kernel: audit: type=1400 audit(1696284168.203:726): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:48.203000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40028e2040 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:02:48.370333 kernel: audit: type=1300 audit(1696284168.203:726): arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40028e2040 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:02:48.203000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:02:48.395015 kernel: audit: type=1327 audit(1696284168.203:726): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:02:48.203000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:48.417698 kernel: audit: type=1400 audit(1696284168.203:727): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:48.203000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=400baae120 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:02:48.446369 kernel: audit: type=1300 audit(1696284168.203:727): arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=400baae120 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:02:48.203000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:02:48.472662 kernel: audit: type=1327 audit(1696284168.203:727): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:02:48.212000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:48.212000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400124e040 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:02:48.212000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:02:48.181000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001258000 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:02:48.181000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:02:48.217000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:48.217000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400ba500f0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:02:48.217000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:02:48.380000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:48.380000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=87 a1=4002c4ca20 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:02:48.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:02:48.380000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:48.380000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=87 a1=400be0c210 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:02:48.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:02:48.703077 kubelet[2152]: I1002 22:02:48.703047 2152 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-02d4509438" Oct 2 22:02:48.794507 kubelet[2152]: E1002 22:02:48.794403 2152 controller.go:146] failed to ensure lease exists, will retry in 3.2s, error: namespaces "kube-node-lease" not found Oct 2 22:02:49.353491 kubelet[2152]: I1002 22:02:49.353427 2152 apiserver.go:52] "Watching apiserver" Oct 2 22:02:49.455578 kubelet[2152]: I1002 22:02:49.455535 2152 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 22:02:49.485568 kubelet[2152]: I1002 22:02:49.485527 2152 reconciler.go:41] "Reconciler: start to sync state" Oct 2 22:02:50.961988 systemd[1]: Reloading. Oct 2 22:02:50.970000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:50.970000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001224ca0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:02:50.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:02:50.972000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:50.972000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001224de0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:02:50.972000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:02:50.974000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:50.974000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001224f20 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:02:50.974000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:02:50.976000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:02:50.976000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40012dd760 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:02:50.976000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:02:51.116501 /usr/lib/systemd/system-generators/torcx-generator[2471]: time="2023-10-02T22:02:51Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 22:02:51.116528 /usr/lib/systemd/system-generators/torcx-generator[2471]: time="2023-10-02T22:02:51Z" level=info msg="torcx already run" Oct 2 22:02:51.261606 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 22:02:51.261625 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 22:02:51.280129 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 22:02:51.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.360000 audit: BPF prog-id=92 op=LOAD Oct 2 22:02:51.360000 audit: BPF prog-id=53 op=UNLOAD Oct 2 22:02:51.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.361000 audit: BPF prog-id=93 op=LOAD Oct 2 22:02:51.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.361000 audit: BPF prog-id=94 op=LOAD Oct 2 22:02:51.361000 audit: BPF prog-id=54 op=UNLOAD Oct 2 22:02:51.361000 audit: BPF prog-id=55 op=UNLOAD Oct 2 22:02:51.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.362000 audit: BPF prog-id=95 op=LOAD Oct 2 22:02:51.362000 audit: BPF prog-id=56 op=UNLOAD Oct 2 22:02:51.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.363000 audit: BPF prog-id=96 op=LOAD Oct 2 22:02:51.363000 audit: BPF prog-id=68 op=UNLOAD Oct 2 22:02:51.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.364000 audit: BPF prog-id=97 op=LOAD Oct 2 22:02:51.365000 audit: BPF prog-id=80 op=UNLOAD Oct 2 22:02:51.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.367000 audit: BPF prog-id=98 op=LOAD Oct 2 22:02:51.369000 audit: BPF prog-id=57 op=UNLOAD Oct 2 22:02:51.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit: BPF prog-id=99 op=LOAD Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.370000 audit: BPF prog-id=100 op=LOAD Oct 2 22:02:51.371000 audit: BPF prog-id=58 op=UNLOAD Oct 2 22:02:51.371000 audit: BPF prog-id=59 op=UNLOAD Oct 2 22:02:51.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.372000 audit: BPF prog-id=101 op=LOAD Oct 2 22:02:51.372000 audit: BPF prog-id=85 op=UNLOAD Oct 2 22:02:51.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.375000 audit: BPF prog-id=102 op=LOAD Oct 2 22:02:51.375000 audit: BPF prog-id=60 op=UNLOAD Oct 2 22:02:51.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.378000 audit: BPF prog-id=103 op=LOAD Oct 2 22:02:51.378000 audit: BPF prog-id=76 op=UNLOAD Oct 2 22:02:51.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.379000 audit: BPF prog-id=104 op=LOAD Oct 2 22:02:51.379000 audit: BPF prog-id=72 op=UNLOAD Oct 2 22:02:51.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.381000 audit: BPF prog-id=105 op=LOAD Oct 2 22:02:51.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.381000 audit: BPF prog-id=106 op=LOAD Oct 2 22:02:51.381000 audit: BPF prog-id=61 op=UNLOAD Oct 2 22:02:51.381000 audit: BPF prog-id=62 op=UNLOAD Oct 2 22:02:51.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.382000 audit: BPF prog-id=107 op=LOAD Oct 2 22:02:51.382000 audit: BPF prog-id=63 op=UNLOAD Oct 2 22:02:51.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.383000 audit: BPF prog-id=108 op=LOAD Oct 2 22:02:51.383000 audit: BPF prog-id=64 op=UNLOAD Oct 2 22:02:51.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit: BPF prog-id=109 op=LOAD Oct 2 22:02:51.385000 audit: BPF prog-id=65 op=UNLOAD Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit: BPF prog-id=110 op=LOAD Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.386000 audit: BPF prog-id=111 op=LOAD Oct 2 22:02:51.386000 audit: BPF prog-id=66 op=UNLOAD Oct 2 22:02:51.386000 audit: BPF prog-id=67 op=UNLOAD Oct 2 22:02:51.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.387000 audit: BPF prog-id=112 op=LOAD Oct 2 22:02:51.387000 audit: BPF prog-id=84 op=UNLOAD Oct 2 22:02:51.416869 kubelet[2152]: I1002 22:02:51.416195 2152 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 22:02:51.419746 systemd[1]: Stopping kubelet.service... Oct 2 22:02:51.435082 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 22:02:51.435297 systemd[1]: Stopped kubelet.service. Oct 2 22:02:51.433000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:51.437452 systemd[1]: Started kubelet.service. Oct 2 22:02:51.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:51.537797 kubelet[2531]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 22:02:51.541561 kubelet[2531]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 22:02:51.541738 kubelet[2531]: I1002 22:02:51.541699 2531 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 22:02:51.545276 kubelet[2531]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 22:02:51.545276 kubelet[2531]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 22:02:51.551341 kubelet[2531]: I1002 22:02:51.551319 2531 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 22:02:51.551471 kubelet[2531]: I1002 22:02:51.551459 2531 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 22:02:51.551713 kubelet[2531]: I1002 22:02:51.551699 2531 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 22:02:51.553153 kubelet[2531]: I1002 22:02:51.553136 2531 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 22:02:51.554839 kubelet[2531]: I1002 22:02:51.554792 2531 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 22:02:51.557484 kubelet[2531]: W1002 22:02:51.557464 2531 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 22:02:51.558326 kubelet[2531]: I1002 22:02:51.558309 2531 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 22:02:51.558649 kubelet[2531]: I1002 22:02:51.558637 2531 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 22:02:51.558808 kubelet[2531]: I1002 22:02:51.558795 2531 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 22:02:51.558988 kubelet[2531]: I1002 22:02:51.558976 2531 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 22:02:51.559054 kubelet[2531]: I1002 22:02:51.559045 2531 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 22:02:51.559152 kubelet[2531]: I1002 22:02:51.559143 2531 state_mem.go:36] "Initialized new in-memory state store" Oct 2 22:02:51.562633 kubelet[2531]: I1002 22:02:51.562609 2531 kubelet.go:398] "Attempting to sync node with API server" Oct 2 22:02:51.563284 kubelet[2531]: I1002 22:02:51.563195 2531 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 22:02:51.563284 kubelet[2531]: I1002 22:02:51.563287 2531 kubelet.go:297] "Adding apiserver pod source" Oct 2 22:02:51.563388 kubelet[2531]: I1002 22:02:51.563298 2531 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 22:02:51.572000 audit[2531]: AVC avc: denied { mac_admin } for pid=2531 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.572000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 22:02:51.572000 audit[2531]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bdde00 a1=4000561c20 a2=4000bdddd0 a3=25 items=0 ppid=1 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:51.572000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 22:02:51.572000 audit[2531]: AVC avc: denied { mac_admin } for pid=2531 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.572000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 22:02:51.572000 audit[2531]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c29360 a1=4000561c38 a2=4000bdde90 a3=25 items=0 ppid=1 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:51.572000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 22:02:51.576000 audit[2544]: USER_ACCT pid=2544 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:51.579029 kubelet[2531]: I1002 22:02:51.572048 2531 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 22:02:51.579029 kubelet[2531]: I1002 22:02:51.572691 2531 server.go:1186] "Started kubelet" Oct 2 22:02:51.579029 kubelet[2531]: I1002 22:02:51.574650 2531 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 22:02:51.579029 kubelet[2531]: I1002 22:02:51.574682 2531 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 22:02:51.579029 kubelet[2531]: I1002 22:02:51.574701 2531 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 22:02:51.579029 kubelet[2531]: E1002 22:02:51.575183 2531 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 22:02:51.579029 kubelet[2531]: E1002 22:02:51.575200 2531 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 22:02:51.577000 audit[2544]: CRED_REFR pid=2544 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:51.579305 sudo[2544]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 22:02:51.579512 sudo[2544]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 22:02:51.584696 kubelet[2531]: I1002 22:02:51.584641 2531 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 22:02:51.583000 audit[2544]: USER_START pid=2544 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:51.586032 kubelet[2531]: I1002 22:02:51.585744 2531 server.go:451] "Adding debug handlers to kubelet server" Oct 2 22:02:51.590501 kubelet[2531]: I1002 22:02:51.589680 2531 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 22:02:51.591667 kubelet[2531]: I1002 22:02:51.591623 2531 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 22:02:51.688626 kubelet[2531]: I1002 22:02:51.688602 2531 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 22:02:51.688791 kubelet[2531]: I1002 22:02:51.688780 2531 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 22:02:51.688885 kubelet[2531]: I1002 22:02:51.688876 2531 state_mem.go:36] "Initialized new in-memory state store" Oct 2 22:02:51.689138 kubelet[2531]: I1002 22:02:51.689128 2531 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 22:02:51.689232 kubelet[2531]: I1002 22:02:51.689223 2531 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 22:02:51.689307 kubelet[2531]: I1002 22:02:51.689299 2531 policy_none.go:49] "None policy: Start" Oct 2 22:02:51.693501 kubelet[2531]: I1002 22:02:51.693472 2531 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 22:02:51.693501 kubelet[2531]: I1002 22:02:51.693498 2531 state_mem.go:35] "Initializing new in-memory state store" Oct 2 22:02:51.693706 kubelet[2531]: I1002 22:02:51.693693 2531 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-02d4509438" Oct 2 22:02:51.693965 kubelet[2531]: I1002 22:02:51.693732 2531 state_mem.go:75] "Updated machine memory state" Oct 2 22:02:51.701593 kubelet[2531]: I1002 22:02:51.701572 2531 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 22:02:51.699000 audit[2531]: AVC avc: denied { mac_admin } for pid=2531 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:51.699000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 22:02:51.699000 audit[2531]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4001372f00 a1=4001376b88 a2=4001372ed0 a3=25 items=0 ppid=1 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:51.699000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 22:02:51.701872 kubelet[2531]: I1002 22:02:51.701631 2531 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 22:02:51.706269 kubelet[2531]: I1002 22:02:51.705695 2531 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 22:02:51.713592 kubelet[2531]: I1002 22:02:51.713563 2531 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-02d4509438" Oct 2 22:02:51.713670 kubelet[2531]: I1002 22:02:51.713626 2531 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-02d4509438" Oct 2 22:02:51.746567 kubelet[2531]: I1002 22:02:51.746545 2531 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 22:02:51.780509 kubelet[2531]: I1002 22:02:51.780487 2531 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 22:02:51.780645 kubelet[2531]: I1002 22:02:51.780636 2531 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 22:02:51.780811 kubelet[2531]: I1002 22:02:51.780799 2531 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 22:02:51.780942 kubelet[2531]: E1002 22:02:51.780933 2531 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 22:02:51.820000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521291 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 22:02:51.820000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000da28c0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:02:51.820000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:02:51.881649 kubelet[2531]: I1002 22:02:51.881615 2531 topology_manager.go:210] "Topology Admit Handler" Oct 2 22:02:51.881887 kubelet[2531]: I1002 22:02:51.881873 2531 topology_manager.go:210] "Topology Admit Handler" Oct 2 22:02:51.881987 kubelet[2531]: I1002 22:02:51.881977 2531 topology_manager.go:210] "Topology Admit Handler" Oct 2 22:02:52.004045 kubelet[2531]: I1002 22:02:52.004009 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5823838bb67fe64a218f542b0f6bd660-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-02d4509438\" (UID: \"5823838bb67fe64a218f542b0f6bd660\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-02d4509438" Oct 2 22:02:52.004270 kubelet[2531]: I1002 22:02:52.004258 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8660efb06a697c9168a4b8c5f2478887-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-02d4509438\" (UID: \"8660efb06a697c9168a4b8c5f2478887\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-02d4509438" Oct 2 22:02:52.004397 kubelet[2531]: I1002 22:02:52.004387 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/8660efb06a697c9168a4b8c5f2478887-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-02d4509438\" (UID: \"8660efb06a697c9168a4b8c5f2478887\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-02d4509438" Oct 2 22:02:52.004526 kubelet[2531]: I1002 22:02:52.004517 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8660efb06a697c9168a4b8c5f2478887-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-02d4509438\" (UID: \"8660efb06a697c9168a4b8c5f2478887\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-02d4509438" Oct 2 22:02:52.004678 kubelet[2531]: I1002 22:02:52.004658 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5823838bb67fe64a218f542b0f6bd660-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-02d4509438\" (UID: \"5823838bb67fe64a218f542b0f6bd660\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-02d4509438" Oct 2 22:02:52.004825 kubelet[2531]: I1002 22:02:52.004807 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8660efb06a697c9168a4b8c5f2478887-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-02d4509438\" (UID: \"8660efb06a697c9168a4b8c5f2478887\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-02d4509438" Oct 2 22:02:52.004971 kubelet[2531]: I1002 22:02:52.004952 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8660efb06a697c9168a4b8c5f2478887-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-02d4509438\" (UID: \"8660efb06a697c9168a4b8c5f2478887\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-02d4509438" Oct 2 22:02:52.005078 kubelet[2531]: I1002 22:02:52.005069 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7cd26ac463201e236ef84b740aa89e6a-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-02d4509438\" (UID: \"7cd26ac463201e236ef84b740aa89e6a\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-02d4509438" Oct 2 22:02:52.005192 kubelet[2531]: I1002 22:02:52.005183 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5823838bb67fe64a218f542b0f6bd660-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-02d4509438\" (UID: \"5823838bb67fe64a218f542b0f6bd660\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-02d4509438" Oct 2 22:02:52.154329 sudo[2544]: pam_unix(sudo:session): session closed for user root Oct 2 22:02:52.153000 audit[2544]: USER_END pid=2544 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:52.153000 audit[2544]: CRED_DISP pid=2544 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:52.566455 kubelet[2531]: I1002 22:02:52.566350 2531 apiserver.go:52] "Watching apiserver" Oct 2 22:02:52.602069 kubelet[2531]: I1002 22:02:52.602040 2531 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 22:02:52.609431 kubelet[2531]: I1002 22:02:52.609409 2531 reconciler.go:41] "Reconciler: start to sync state" Oct 2 22:02:52.797402 kubelet[2531]: E1002 22:02:52.797377 2531 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-02d4509438\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-02d4509438" Oct 2 22:02:52.971340 kubelet[2531]: E1002 22:02:52.971316 2531 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510.3.0-a-02d4509438\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-02d4509438" Oct 2 22:02:53.171627 kubelet[2531]: E1002 22:02:53.171600 2531 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510.3.0-a-02d4509438\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.0-a-02d4509438" Oct 2 22:02:53.437036 sudo[1745]: pam_unix(sudo:session): session closed for user root Oct 2 22:02:53.436000 audit[1745]: USER_END pid=1745 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:53.442648 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 22:02:53.442714 kernel: audit: type=1106 audit(1696284173.436:991): pid=1745 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:53.439000 audit[1745]: CRED_DISP pid=1745 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:53.484450 kernel: audit: type=1104 audit(1696284173.439:992): pid=1745 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:53.519583 sshd[1742]: pam_unix(sshd:session): session closed for user core Oct 2 22:02:53.519000 audit[1742]: USER_END pid=1742 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:53.520000 audit[1742]: CRED_DISP pid=1742 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:53.548263 systemd-logind[1367]: Session 9 logged out. Waiting for processes to exit. Oct 2 22:02:53.549109 systemd[1]: sshd@6-10.200.20.19:22-10.200.12.6:36190.service: Deactivated successfully. Oct 2 22:02:53.549836 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 22:02:53.550002 systemd[1]: session-9.scope: Consumed 5.606s CPU time. Oct 2 22:02:53.551220 systemd-logind[1367]: Removed session 9. Oct 2 22:02:53.568581 kernel: audit: type=1106 audit(1696284173.519:993): pid=1742 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:53.568672 kernel: audit: type=1104 audit(1696284173.520:994): pid=1742 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:53.548000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.19:22-10.200.12.6:36190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:53.589862 kernel: audit: type=1131 audit(1696284173.548:995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.19:22-10.200.12.6:36190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:53.593446 kubelet[2531]: I1002 22:02:53.593415 2531 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-02d4509438" podStartSLOduration=2.593351032 pod.CreationTimestamp="2023-10-02 22:02:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 22:02:53.593051056 +0000 UTC m=+2.130187834" watchObservedRunningTime="2023-10-02 22:02:53.593351032 +0000 UTC m=+2.130487770" Oct 2 22:02:53.968477 kubelet[2531]: I1002 22:02:53.968447 2531 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-02d4509438" podStartSLOduration=2.9684122349999997 pod.CreationTimestamp="2023-10-02 22:02:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 22:02:53.968318603 +0000 UTC m=+2.505455381" watchObservedRunningTime="2023-10-02 22:02:53.968412235 +0000 UTC m=+2.505549013" Oct 2 22:02:57.156558 kubelet[2531]: I1002 22:02:57.156513 2531 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-02d4509438" podStartSLOduration=6.156480967 pod.CreationTimestamp="2023-10-02 22:02:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 22:02:54.368724471 +0000 UTC m=+2.905861249" watchObservedRunningTime="2023-10-02 22:02:57.156480967 +0000 UTC m=+5.693617745" Oct 2 22:03:03.916367 kubelet[2531]: I1002 22:03:03.916333 2531 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 22:03:03.916795 env[1377]: time="2023-10-02T22:03:03.916730982Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 22:03:03.917035 kubelet[2531]: I1002 22:03:03.917003 2531 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 22:03:03.995484 kubelet[2531]: I1002 22:03:03.995439 2531 topology_manager.go:210] "Topology Admit Handler" Oct 2 22:03:04.000257 systemd[1]: Created slice kubepods-besteffort-pod5c2ea237_eaac_42ce_b8d6_d3a908b5a19c.slice. Oct 2 22:03:04.015198 kubelet[2531]: I1002 22:03:04.015155 2531 topology_manager.go:210] "Topology Admit Handler" Oct 2 22:03:04.019927 systemd[1]: Created slice kubepods-burstable-pod78dfb957_827a_4569_93f2_9f09a6bc01b5.slice. Oct 2 22:03:04.068531 kubelet[2531]: I1002 22:03:04.068499 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/78dfb957-827a-4569-93f2-9f09a6bc01b5-clustermesh-secrets\") pod \"cilium-k5t6b\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " pod="kube-system/cilium-k5t6b" Oct 2 22:03:04.068531 kubelet[2531]: I1002 22:03:04.068540 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-cilium-cgroup\") pod \"cilium-k5t6b\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " pod="kube-system/cilium-k5t6b" Oct 2 22:03:04.068709 kubelet[2531]: I1002 22:03:04.068573 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vvk7t\" (UniqueName: \"kubernetes.io/projected/5c2ea237-eaac-42ce-b8d6-d3a908b5a19c-kube-api-access-vvk7t\") pod \"kube-proxy-79kmh\" (UID: \"5c2ea237-eaac-42ce-b8d6-d3a908b5a19c\") " pod="kube-system/kube-proxy-79kmh" Oct 2 22:03:04.068709 kubelet[2531]: I1002 22:03:04.068593 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-lib-modules\") pod \"cilium-k5t6b\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " pod="kube-system/cilium-k5t6b" Oct 2 22:03:04.068709 kubelet[2531]: I1002 22:03:04.068621 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-host-proc-sys-kernel\") pod \"cilium-k5t6b\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " pod="kube-system/cilium-k5t6b" Oct 2 22:03:04.068709 kubelet[2531]: I1002 22:03:04.068652 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xz46n\" (UniqueName: \"kubernetes.io/projected/78dfb957-827a-4569-93f2-9f09a6bc01b5-kube-api-access-xz46n\") pod \"cilium-k5t6b\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " pod="kube-system/cilium-k5t6b" Oct 2 22:03:04.068709 kubelet[2531]: I1002 22:03:04.068681 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-xtables-lock\") pod \"cilium-k5t6b\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " pod="kube-system/cilium-k5t6b" Oct 2 22:03:04.069044 kubelet[2531]: I1002 22:03:04.069022 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/78dfb957-827a-4569-93f2-9f09a6bc01b5-hubble-tls\") pod \"cilium-k5t6b\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " pod="kube-system/cilium-k5t6b" Oct 2 22:03:04.069200 kubelet[2531]: I1002 22:03:04.069184 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-etc-cni-netd\") pod \"cilium-k5t6b\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " pod="kube-system/cilium-k5t6b" Oct 2 22:03:04.069343 kubelet[2531]: I1002 22:03:04.069327 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/78dfb957-827a-4569-93f2-9f09a6bc01b5-cilium-config-path\") pod \"cilium-k5t6b\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " pod="kube-system/cilium-k5t6b" Oct 2 22:03:04.069515 kubelet[2531]: I1002 22:03:04.069499 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-host-proc-sys-net\") pod \"cilium-k5t6b\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " pod="kube-system/cilium-k5t6b" Oct 2 22:03:04.069591 kubelet[2531]: I1002 22:03:04.069575 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5c2ea237-eaac-42ce-b8d6-d3a908b5a19c-xtables-lock\") pod \"kube-proxy-79kmh\" (UID: \"5c2ea237-eaac-42ce-b8d6-d3a908b5a19c\") " pod="kube-system/kube-proxy-79kmh" Oct 2 22:03:04.069910 kubelet[2531]: I1002 22:03:04.069893 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-cni-path\") pod \"cilium-k5t6b\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " pod="kube-system/cilium-k5t6b" Oct 2 22:03:04.070183 kubelet[2531]: I1002 22:03:04.070167 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-cilium-run\") pod \"cilium-k5t6b\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " pod="kube-system/cilium-k5t6b" Oct 2 22:03:04.070362 kubelet[2531]: I1002 22:03:04.070347 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-bpf-maps\") pod \"cilium-k5t6b\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " pod="kube-system/cilium-k5t6b" Oct 2 22:03:04.070683 kubelet[2531]: I1002 22:03:04.070667 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-hostproc\") pod \"cilium-k5t6b\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " pod="kube-system/cilium-k5t6b" Oct 2 22:03:04.071606 kubelet[2531]: I1002 22:03:04.071280 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/5c2ea237-eaac-42ce-b8d6-d3a908b5a19c-kube-proxy\") pod \"kube-proxy-79kmh\" (UID: \"5c2ea237-eaac-42ce-b8d6-d3a908b5a19c\") " pod="kube-system/kube-proxy-79kmh" Oct 2 22:03:04.071646 kubelet[2531]: I1002 22:03:04.071631 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5c2ea237-eaac-42ce-b8d6-d3a908b5a19c-lib-modules\") pod \"kube-proxy-79kmh\" (UID: \"5c2ea237-eaac-42ce-b8d6-d3a908b5a19c\") " pod="kube-system/kube-proxy-79kmh" Oct 2 22:03:04.189855 kubelet[2531]: E1002 22:03:04.189054 2531 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 22:03:04.189855 kubelet[2531]: E1002 22:03:04.189081 2531 projected.go:198] Error preparing data for projected volume kube-api-access-xz46n for pod kube-system/cilium-k5t6b: configmap "kube-root-ca.crt" not found Oct 2 22:03:04.189855 kubelet[2531]: E1002 22:03:04.189131 2531 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/78dfb957-827a-4569-93f2-9f09a6bc01b5-kube-api-access-xz46n podName:78dfb957-827a-4569-93f2-9f09a6bc01b5 nodeName:}" failed. No retries permitted until 2023-10-02 22:03:04.689113436 +0000 UTC m=+13.226250214 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-xz46n" (UniqueName: "kubernetes.io/projected/78dfb957-827a-4569-93f2-9f09a6bc01b5-kube-api-access-xz46n") pod "cilium-k5t6b" (UID: "78dfb957-827a-4569-93f2-9f09a6bc01b5") : configmap "kube-root-ca.crt" not found Oct 2 22:03:04.203670 kubelet[2531]: E1002 22:03:04.203637 2531 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 22:03:04.203670 kubelet[2531]: E1002 22:03:04.203666 2531 projected.go:198] Error preparing data for projected volume kube-api-access-vvk7t for pod kube-system/kube-proxy-79kmh: configmap "kube-root-ca.crt" not found Oct 2 22:03:04.203862 kubelet[2531]: E1002 22:03:04.203708 2531 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/5c2ea237-eaac-42ce-b8d6-d3a908b5a19c-kube-api-access-vvk7t podName:5c2ea237-eaac-42ce-b8d6-d3a908b5a19c nodeName:}" failed. No retries permitted until 2023-10-02 22:03:04.703691993 +0000 UTC m=+13.240828771 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-vvk7t" (UniqueName: "kubernetes.io/projected/5c2ea237-eaac-42ce-b8d6-d3a908b5a19c-kube-api-access-vvk7t") pod "kube-proxy-79kmh" (UID: "5c2ea237-eaac-42ce-b8d6-d3a908b5a19c") : configmap "kube-root-ca.crt" not found Oct 2 22:03:04.861076 kubelet[2531]: I1002 22:03:04.860016 2531 topology_manager.go:210] "Topology Admit Handler" Oct 2 22:03:04.865513 systemd[1]: Created slice kubepods-besteffort-pod525a8bc4_4aa3_47e9_a85e_c9cc0ffb1b9c.slice. Oct 2 22:03:04.877794 kubelet[2531]: I1002 22:03:04.877757 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-mxdlq\" (UID: \"525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c\") " pod="kube-system/cilium-operator-f59cbd8c6-mxdlq" Oct 2 22:03:04.877990 kubelet[2531]: I1002 22:03:04.877978 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-l9clt\" (UniqueName: \"kubernetes.io/projected/525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c-kube-api-access-l9clt\") pod \"cilium-operator-f59cbd8c6-mxdlq\" (UID: \"525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c\") " pod="kube-system/cilium-operator-f59cbd8c6-mxdlq" Oct 2 22:03:04.907529 env[1377]: time="2023-10-02T22:03:04.907480219Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-79kmh,Uid:5c2ea237-eaac-42ce-b8d6-d3a908b5a19c,Namespace:kube-system,Attempt:0,}" Oct 2 22:03:04.923135 env[1377]: time="2023-10-02T22:03:04.923093511Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-k5t6b,Uid:78dfb957-827a-4569-93f2-9f09a6bc01b5,Namespace:kube-system,Attempt:0,}" Oct 2 22:03:05.168794 env[1377]: time="2023-10-02T22:03:05.168276486Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-mxdlq,Uid:525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c,Namespace:kube-system,Attempt:0,}" Oct 2 22:03:05.396788 env[1377]: time="2023-10-02T22:03:05.392096884Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 22:03:05.396788 env[1377]: time="2023-10-02T22:03:05.392173839Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 22:03:05.396788 env[1377]: time="2023-10-02T22:03:05.392198758Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 22:03:05.396788 env[1377]: time="2023-10-02T22:03:05.392375267Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1c7d92df34fde84e3990c6698cb250650f055613aaa39ccd0e205a99814aeb14 pid=2636 runtime=io.containerd.runc.v2 Oct 2 22:03:05.405471 env[1377]: time="2023-10-02T22:03:05.405402819Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 22:03:05.405629 env[1377]: time="2023-10-02T22:03:05.405452096Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 22:03:05.405629 env[1377]: time="2023-10-02T22:03:05.405610886Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 22:03:05.406109 env[1377]: time="2023-10-02T22:03:05.405924667Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb pid=2639 runtime=io.containerd.runc.v2 Oct 2 22:03:05.414967 systemd[1]: Started cri-containerd-1c7d92df34fde84e3990c6698cb250650f055613aaa39ccd0e205a99814aeb14.scope. Oct 2 22:03:05.427936 env[1377]: time="2023-10-02T22:03:05.427507128Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 22:03:05.427936 env[1377]: time="2023-10-02T22:03:05.427546126Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 22:03:05.427936 env[1377]: time="2023-10-02T22:03:05.427556725Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 22:03:05.428107 env[1377]: time="2023-10-02T22:03:05.427713275Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48 pid=2674 runtime=io.containerd.runc.v2 Oct 2 22:03:05.434403 systemd[1]: Started cri-containerd-4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb.scope. Oct 2 22:03:05.455899 systemd[1]: Started cri-containerd-60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48.scope. Oct 2 22:03:05.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.500014 kernel: audit: type=1400 audit(1696284185.459:996): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.500131 kernel: audit: type=1400 audit(1696284185.459:997): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.500165 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 22:03:05.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.523639 kernel: audit: type=1400 audit(1696284185.459:998): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.523739 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 22:03:05.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.549749 kernel: audit: type=1400 audit(1696284185.459:999): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.549870 kernel: audit: backlog limit exceeded Oct 2 22:03:05.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.571122 kernel: audit: type=1400 audit(1696284185.459:1000): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.595214 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 22:03:05.595292 kernel: audit: type=1400 audit(1696284185.459:1001): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit: BPF prog-id=113 op=LOAD Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2639 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461303264313431323034356538333831303431376537643762633538 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2639 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461303264313431323034356538333831303431376537643762633538 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit: BPF prog-id=114 op=LOAD Oct 2 22:03:05.459000 audit[2665]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2639 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461303264313431323034356538333831303431376537643762633538 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit: BPF prog-id=115 op=LOAD Oct 2 22:03:05.459000 audit[2665]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2639 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461303264313431323034356538333831303431376537643762633538 Oct 2 22:03:05.459000 audit: BPF prog-id=115 op=UNLOAD Oct 2 22:03:05.459000 audit: BPF prog-id=114 op=UNLOAD Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { perfmon } for pid=2665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit[2665]: AVC avc: denied { bpf } for pid=2665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.459000 audit: BPF prog-id=116 op=LOAD Oct 2 22:03:05.459000 audit[2665]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2639 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461303264313431323034356538333831303431376537643762633538 Oct 2 22:03:05.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.579000 audit: BPF prog-id=117 op=LOAD Oct 2 22:03:05.593000 audit: BPF prog-id=119 op=UNLOAD Oct 2 22:03:05.593000 audit[2692]: AVC avc: denied { bpf } for pid=2692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.593000 audit: BPF prog-id=120 op=LOAD Oct 2 22:03:05.593000 audit[2692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2674 pid=2692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630656532313232623139316366336364636335613235323733376361 Oct 2 22:03:05.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.602000 audit: BPF prog-id=121 op=LOAD Oct 2 22:03:05.602000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.602000 audit[2653]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2636 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163376439326466333466646538346533393930633636393863623235 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2636 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163376439326466333466646538346533393930633636393863623235 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit: BPF prog-id=122 op=LOAD Oct 2 22:03:05.603000 audit[2653]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2636 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163376439326466333466646538346533393930633636393863623235 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit: BPF prog-id=123 op=LOAD Oct 2 22:03:05.603000 audit[2653]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2636 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163376439326466333466646538346533393930633636393863623235 Oct 2 22:03:05.603000 audit: BPF prog-id=123 op=UNLOAD Oct 2 22:03:05.603000 audit: BPF prog-id=122 op=UNLOAD Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.603000 audit: BPF prog-id=124 op=LOAD Oct 2 22:03:05.603000 audit[2653]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2636 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163376439326466333466646538346533393930633636393863623235 Oct 2 22:03:05.608768 env[1377]: time="2023-10-02T22:03:05.608707330Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-k5t6b,Uid:78dfb957-827a-4569-93f2-9f09a6bc01b5,Namespace:kube-system,Attempt:0,} returns sandbox id \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\"" Oct 2 22:03:05.612468 env[1377]: time="2023-10-02T22:03:05.612427939Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 22:03:05.636332 env[1377]: time="2023-10-02T22:03:05.636287859Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-79kmh,Uid:5c2ea237-eaac-42ce-b8d6-d3a908b5a19c,Namespace:kube-system,Attempt:0,} returns sandbox id \"1c7d92df34fde84e3990c6698cb250650f055613aaa39ccd0e205a99814aeb14\"" Oct 2 22:03:05.641050 env[1377]: time="2023-10-02T22:03:05.641021086Z" level=info msg="CreateContainer within sandbox \"1c7d92df34fde84e3990c6698cb250650f055613aaa39ccd0e205a99814aeb14\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 22:03:05.647031 env[1377]: time="2023-10-02T22:03:05.647004634Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-mxdlq,Uid:525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c,Namespace:kube-system,Attempt:0,} returns sandbox id \"60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48\"" Oct 2 22:03:05.685993 env[1377]: time="2023-10-02T22:03:05.685902782Z" level=info msg="CreateContainer within sandbox \"1c7d92df34fde84e3990c6698cb250650f055613aaa39ccd0e205a99814aeb14\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"28551f5160886334ee8117c27fa19a97baea72484309e120f1d1d4f8c495cfa7\"" Oct 2 22:03:05.687852 env[1377]: time="2023-10-02T22:03:05.687799384Z" level=info msg="StartContainer for \"28551f5160886334ee8117c27fa19a97baea72484309e120f1d1d4f8c495cfa7\"" Oct 2 22:03:05.710916 systemd[1]: Started cri-containerd-28551f5160886334ee8117c27fa19a97baea72484309e120f1d1d4f8c495cfa7.scope. Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2636 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238353531663531363038383633333465653831313763323766613139 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit: BPF prog-id=125 op=LOAD Oct 2 22:03:05.730000 audit[2754]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2636 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238353531663531363038383633333465653831313763323766613139 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit: BPF prog-id=126 op=LOAD Oct 2 22:03:05.730000 audit[2754]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2636 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238353531663531363038383633333465653831313763323766613139 Oct 2 22:03:05.730000 audit: BPF prog-id=126 op=UNLOAD Oct 2 22:03:05.730000 audit: BPF prog-id=125 op=UNLOAD Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:05.730000 audit: BPF prog-id=127 op=LOAD Oct 2 22:03:05.730000 audit[2754]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2636 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238353531663531363038383633333465653831313763323766613139 Oct 2 22:03:05.753085 env[1377]: time="2023-10-02T22:03:05.753025539Z" level=info msg="StartContainer for \"28551f5160886334ee8117c27fa19a97baea72484309e120f1d1d4f8c495cfa7\" returns successfully" Oct 2 22:03:05.828000 audit[2802]: NETFILTER_CFG table=mangle:62 family=10 entries=1 op=nft_register_chain pid=2802 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:05.828000 audit[2802]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe3819120 a2=0 a3=ffffaa69e6c0 items=0 ppid=2765 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.828000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 22:03:05.832000 audit[2803]: NETFILTER_CFG table=nat:63 family=10 entries=1 op=nft_register_chain pid=2803 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:05.832000 audit[2803]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffff40e180 a2=0 a3=ffffbac2e6c0 items=0 ppid=2765 pid=2803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.832000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 22:03:05.833000 audit[2804]: NETFILTER_CFG table=mangle:64 family=2 entries=1 op=nft_register_chain pid=2804 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.833000 audit[2804]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc0ac82a0 a2=0 a3=ffff920cd6c0 items=0 ppid=2765 pid=2804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.833000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 22:03:05.835000 audit[2807]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2807 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:05.835000 audit[2807]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff2cc8a00 a2=0 a3=ffffb69446c0 items=0 ppid=2765 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.835000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 22:03:05.836000 audit[2808]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_chain pid=2808 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.836000 audit[2808]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe71c6580 a2=0 a3=ffff8667e6c0 items=0 ppid=2765 pid=2808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.836000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 22:03:05.838000 audit[2809]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_chain pid=2809 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.838000 audit[2809]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc9127380 a2=0 a3=ffff9a8196c0 items=0 ppid=2765 pid=2809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.838000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 22:03:05.928000 audit[2810]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2810 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.928000 audit[2810]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff1852800 a2=0 a3=ffff983856c0 items=0 ppid=2765 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.928000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 22:03:05.932000 audit[2812]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2812 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.932000 audit[2812]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffec3ccd60 a2=0 a3=ffff9bede6c0 items=0 ppid=2765 pid=2812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.932000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 22:03:05.937000 audit[2815]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_rule pid=2815 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.937000 audit[2815]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff1e58c20 a2=0 a3=ffffaa2406c0 items=0 ppid=2765 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.937000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 22:03:05.939000 audit[2816]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_chain pid=2816 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.939000 audit[2816]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeef035b0 a2=0 a3=ffffa7a156c0 items=0 ppid=2765 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.939000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 22:03:05.942000 audit[2818]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2818 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.942000 audit[2818]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe8a7be10 a2=0 a3=ffffbad816c0 items=0 ppid=2765 pid=2818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.942000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 22:03:05.944000 audit[2819]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2819 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.944000 audit[2819]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe9854220 a2=0 a3=ffff8548e6c0 items=0 ppid=2765 pid=2819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.944000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 22:03:05.947000 audit[2821]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=2821 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.947000 audit[2821]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd7264af0 a2=0 a3=ffff9309b6c0 items=0 ppid=2765 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.947000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 22:03:05.953000 audit[2824]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_rule pid=2824 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.953000 audit[2824]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff93697f0 a2=0 a3=ffffb16826c0 items=0 ppid=2765 pid=2824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.953000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 22:03:05.955000 audit[2825]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_chain pid=2825 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.955000 audit[2825]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc40daef0 a2=0 a3=ffffb63726c0 items=0 ppid=2765 pid=2825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.955000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 22:03:05.958000 audit[2827]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=2827 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.958000 audit[2827]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffeec23930 a2=0 a3=ffff8e1756c0 items=0 ppid=2765 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.958000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 22:03:05.960000 audit[2828]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_chain pid=2828 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.960000 audit[2828]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc1e66fb0 a2=0 a3=ffff85fea6c0 items=0 ppid=2765 pid=2828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.960000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 22:03:05.968000 audit[2830]: NETFILTER_CFG table=filter:79 family=2 entries=1 op=nft_register_rule pid=2830 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.968000 audit[2830]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcb5944b0 a2=0 a3=ffff87ca96c0 items=0 ppid=2765 pid=2830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.968000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 22:03:05.973000 audit[2833]: NETFILTER_CFG table=filter:80 family=2 entries=1 op=nft_register_rule pid=2833 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.973000 audit[2833]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcceca450 a2=0 a3=ffff844806c0 items=0 ppid=2765 pid=2833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.973000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 22:03:05.980000 audit[2836]: NETFILTER_CFG table=filter:81 family=2 entries=1 op=nft_register_rule pid=2836 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.980000 audit[2836]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc8e07c30 a2=0 a3=ffff835476c0 items=0 ppid=2765 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.980000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 22:03:05.981000 audit[2837]: NETFILTER_CFG table=nat:82 family=2 entries=1 op=nft_register_chain pid=2837 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.981000 audit[2837]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffef7b3ab0 a2=0 a3=ffffa58a26c0 items=0 ppid=2765 pid=2837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.981000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 22:03:05.985000 audit[2839]: NETFILTER_CFG table=nat:83 family=2 entries=1 op=nft_register_rule pid=2839 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.985000 audit[2839]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffe5d14b70 a2=0 a3=ffff989116c0 items=0 ppid=2765 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.985000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 22:03:05.991000 audit[2842]: NETFILTER_CFG table=nat:84 family=2 entries=1 op=nft_register_rule pid=2842 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:05.991000 audit[2842]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffea446260 a2=0 a3=ffffbcec46c0 items=0 ppid=2765 pid=2842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:05.991000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 22:03:06.046000 audit[2846]: NETFILTER_CFG table=filter:85 family=2 entries=6 op=nft_register_rule pid=2846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 22:03:06.046000 audit[2846]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=fffff2fb3830 a2=0 a3=ffffbf1056c0 items=0 ppid=2765 pid=2846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.046000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 22:03:06.075000 audit[2846]: NETFILTER_CFG table=nat:86 family=2 entries=17 op=nft_register_chain pid=2846 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 22:03:06.075000 audit[2846]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=fffff2fb3830 a2=0 a3=ffffbf1056c0 items=0 ppid=2765 pid=2846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.075000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 22:03:06.083000 audit[2850]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=2850 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.083000 audit[2850]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc9d268f0 a2=0 a3=ffffbeeff6c0 items=0 ppid=2765 pid=2850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.083000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 22:03:06.087000 audit[2852]: NETFILTER_CFG table=filter:88 family=10 entries=2 op=nft_register_chain pid=2852 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.087000 audit[2852]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffcbb60f10 a2=0 a3=ffffbf0eb6c0 items=0 ppid=2765 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.087000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 22:03:06.094000 audit[2855]: NETFILTER_CFG table=filter:89 family=10 entries=2 op=nft_register_chain pid=2855 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.094000 audit[2855]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc1c489c0 a2=0 a3=ffff8b2ab6c0 items=0 ppid=2765 pid=2855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.094000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 22:03:06.096000 audit[2856]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_chain pid=2856 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.096000 audit[2856]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd7d2dd40 a2=0 a3=ffffba0e66c0 items=0 ppid=2765 pid=2856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.096000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 22:03:06.100000 audit[2858]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_rule pid=2858 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.100000 audit[2858]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe2424100 a2=0 a3=ffffac46e6c0 items=0 ppid=2765 pid=2858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.100000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 22:03:06.102000 audit[2859]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=2859 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.102000 audit[2859]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffdfa1910 a2=0 a3=ffffb32376c0 items=0 ppid=2765 pid=2859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.102000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 22:03:06.106000 audit[2861]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=2861 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.106000 audit[2861]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff2f7d990 a2=0 a3=ffffa615a6c0 items=0 ppid=2765 pid=2861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.106000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 22:03:06.111000 audit[2864]: NETFILTER_CFG table=filter:94 family=10 entries=2 op=nft_register_chain pid=2864 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.111000 audit[2864]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff9eecd00 a2=0 a3=ffffa57076c0 items=0 ppid=2765 pid=2864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.111000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 22:03:06.113000 audit[2865]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_chain pid=2865 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.113000 audit[2865]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcce991d0 a2=0 a3=ffff896f36c0 items=0 ppid=2765 pid=2865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.113000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 22:03:06.116000 audit[2867]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=2867 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.116000 audit[2867]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffebff07c0 a2=0 a3=ffffaaae86c0 items=0 ppid=2765 pid=2867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.116000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 22:03:06.118000 audit[2868]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_chain pid=2868 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.118000 audit[2868]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff3b44050 a2=0 a3=ffffac55c6c0 items=0 ppid=2765 pid=2868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.118000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 22:03:06.121000 audit[2870]: NETFILTER_CFG table=filter:98 family=10 entries=1 op=nft_register_rule pid=2870 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.121000 audit[2870]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffb2c0110 a2=0 a3=ffffab5c46c0 items=0 ppid=2765 pid=2870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.121000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 22:03:06.126000 audit[2873]: NETFILTER_CFG table=filter:99 family=10 entries=1 op=nft_register_rule pid=2873 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.126000 audit[2873]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffdabe9b0 a2=0 a3=ffffa50b66c0 items=0 ppid=2765 pid=2873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.126000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 22:03:06.131000 audit[2876]: NETFILTER_CFG table=filter:100 family=10 entries=1 op=nft_register_rule pid=2876 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.131000 audit[2876]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc5669f50 a2=0 a3=ffffbd3906c0 items=0 ppid=2765 pid=2876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.131000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 22:03:06.133000 audit[2877]: NETFILTER_CFG table=nat:101 family=10 entries=1 op=nft_register_chain pid=2877 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.133000 audit[2877]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff300acf0 a2=0 a3=ffffb5d206c0 items=0 ppid=2765 pid=2877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.133000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 22:03:06.136000 audit[2879]: NETFILTER_CFG table=nat:102 family=10 entries=2 op=nft_register_chain pid=2879 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.136000 audit[2879]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffdeb13130 a2=0 a3=ffffbc7376c0 items=0 ppid=2765 pid=2879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.136000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 22:03:06.140000 audit[2882]: NETFILTER_CFG table=nat:103 family=10 entries=2 op=nft_register_chain pid=2882 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:06.140000 audit[2882]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffe088cf10 a2=0 a3=ffff8d6fe6c0 items=0 ppid=2765 pid=2882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.140000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 22:03:06.147000 audit[2886]: NETFILTER_CFG table=filter:104 family=10 entries=3 op=nft_register_rule pid=2886 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 22:03:06.147000 audit[2886]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffc19adb40 a2=0 a3=ffffb28b26c0 items=0 ppid=2765 pid=2886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.147000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 22:03:06.148000 audit[2886]: NETFILTER_CFG table=nat:105 family=10 entries=10 op=nft_register_chain pid=2886 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 22:03:06.148000 audit[2886]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffc19adb40 a2=0 a3=ffffb28b26c0 items=0 ppid=2765 pid=2886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.148000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 22:03:10.034222 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2403212850.mount: Deactivated successfully. Oct 2 22:03:11.793593 kubelet[2531]: I1002 22:03:11.793566 2531 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-79kmh" podStartSLOduration=8.793524371 pod.CreationTimestamp="2023-10-02 22:03:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 22:03:05.823715675 +0000 UTC m=+14.360852453" watchObservedRunningTime="2023-10-02 22:03:11.793524371 +0000 UTC m=+20.330661149" Oct 2 22:03:12.754652 env[1377]: time="2023-10-02T22:03:12.754579857Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:12.763190 env[1377]: time="2023-10-02T22:03:12.762489148Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:12.778545 env[1377]: time="2023-10-02T22:03:12.778514678Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:12.779341 env[1377]: time="2023-10-02T22:03:12.779316315Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 22:03:12.780550 env[1377]: time="2023-10-02T22:03:12.780518530Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 22:03:12.783613 env[1377]: time="2023-10-02T22:03:12.783587923Z" level=info msg="CreateContainer within sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 22:03:12.817029 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1280868383.mount: Deactivated successfully. Oct 2 22:03:12.828689 env[1377]: time="2023-10-02T22:03:12.828656038Z" level=info msg="CreateContainer within sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d\"" Oct 2 22:03:12.829335 env[1377]: time="2023-10-02T22:03:12.829313442Z" level=info msg="StartContainer for \"d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d\"" Oct 2 22:03:12.851569 systemd[1]: Started cri-containerd-d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d.scope. Oct 2 22:03:12.867273 systemd[1]: cri-containerd-d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d.scope: Deactivated successfully. Oct 2 22:03:13.813986 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d-rootfs.mount: Deactivated successfully. Oct 2 22:03:13.988687 env[1377]: time="2023-10-02T22:03:13.988624262Z" level=info msg="shim disconnected" id=d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d Oct 2 22:03:13.989083 env[1377]: time="2023-10-02T22:03:13.989051079Z" level=warning msg="cleaning up after shim disconnected" id=d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d namespace=k8s.io Oct 2 22:03:13.989146 env[1377]: time="2023-10-02T22:03:13.989133675Z" level=info msg="cleaning up dead shim" Oct 2 22:03:14.011401 env[1377]: time="2023-10-02T22:03:14.011349101Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:03:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2913 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:03:14Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:03:14.011898 env[1377]: time="2023-10-02T22:03:14.011797958Z" level=error msg="copy shim log" error="read /proc/self/fd/53: file already closed" Oct 2 22:03:14.012217 env[1377]: time="2023-10-02T22:03:14.012021066Z" level=error msg="Failed to pipe stdout of container \"d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d\"" error="reading from a closed fifo" Oct 2 22:03:14.012331 env[1377]: time="2023-10-02T22:03:14.012165499Z" level=error msg="Failed to pipe stderr of container \"d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d\"" error="reading from a closed fifo" Oct 2 22:03:14.017434 env[1377]: time="2023-10-02T22:03:14.017372386Z" level=error msg="StartContainer for \"d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:03:14.019523 kubelet[2531]: E1002 22:03:14.017643 2531 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d" Oct 2 22:03:14.019523 kubelet[2531]: E1002 22:03:14.018041 2531 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:03:14.019523 kubelet[2531]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:03:14.019523 kubelet[2531]: rm /hostbin/cilium-mount Oct 2 22:03:14.020003 kubelet[2531]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xz46n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:03:14.020553 kubelet[2531]: E1002 22:03:14.020450 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:03:14.833702 env[1377]: time="2023-10-02T22:03:14.833662022Z" level=info msg="CreateContainer within sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 22:03:14.861369 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4107403603.mount: Deactivated successfully. Oct 2 22:03:14.869382 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2620619527.mount: Deactivated successfully. Oct 2 22:03:14.881481 env[1377]: time="2023-10-02T22:03:14.881425442Z" level=info msg="CreateContainer within sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104\"" Oct 2 22:03:14.883543 env[1377]: time="2023-10-02T22:03:14.882649378Z" level=info msg="StartContainer for \"2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104\"" Oct 2 22:03:14.908558 systemd[1]: Started cri-containerd-2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104.scope. Oct 2 22:03:14.932339 systemd[1]: cri-containerd-2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104.scope: Deactivated successfully. Oct 2 22:03:14.985694 env[1377]: time="2023-10-02T22:03:14.985632548Z" level=info msg="shim disconnected" id=2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104 Oct 2 22:03:14.985980 env[1377]: time="2023-10-02T22:03:14.985961210Z" level=warning msg="cleaning up after shim disconnected" id=2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104 namespace=k8s.io Oct 2 22:03:14.986045 env[1377]: time="2023-10-02T22:03:14.986031967Z" level=info msg="cleaning up dead shim" Oct 2 22:03:15.004940 env[1377]: time="2023-10-02T22:03:15.004900023Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:03:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2953 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:03:15Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:03:15.005503 env[1377]: time="2023-10-02T22:03:15.005453714Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 22:03:15.007850 env[1377]: time="2023-10-02T22:03:15.007817993Z" level=error msg="Failed to pipe stdout of container \"2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104\"" error="reading from a closed fifo" Oct 2 22:03:15.008841 env[1377]: time="2023-10-02T22:03:15.008812542Z" level=error msg="Failed to pipe stderr of container \"2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104\"" error="reading from a closed fifo" Oct 2 22:03:15.015360 env[1377]: time="2023-10-02T22:03:15.015324687Z" level=error msg="StartContainer for \"2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:03:15.016072 kubelet[2531]: E1002 22:03:15.015610 2531 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104" Oct 2 22:03:15.016072 kubelet[2531]: E1002 22:03:15.015704 2531 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:03:15.016072 kubelet[2531]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:03:15.016072 kubelet[2531]: rm /hostbin/cilium-mount Oct 2 22:03:15.016287 kubelet[2531]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xz46n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:03:15.016446 kubelet[2531]: E1002 22:03:15.015737 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:03:15.604171 env[1377]: time="2023-10-02T22:03:15.604129367Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:15.613398 env[1377]: time="2023-10-02T22:03:15.613366172Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:15.617554 env[1377]: time="2023-10-02T22:03:15.617531438Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:15.618203 env[1377]: time="2023-10-02T22:03:15.618179205Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 22:03:15.621212 env[1377]: time="2023-10-02T22:03:15.621178091Z" level=info msg="CreateContainer within sandbox \"60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 22:03:15.648296 env[1377]: time="2023-10-02T22:03:15.648252258Z" level=info msg="CreateContainer within sandbox \"60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7\"" Oct 2 22:03:15.650063 env[1377]: time="2023-10-02T22:03:15.648742553Z" level=info msg="StartContainer for \"271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7\"" Oct 2 22:03:15.667878 systemd[1]: Started cri-containerd-271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7.scope. Oct 2 22:03:15.691790 kernel: kauditd_printk_skb: 416 callbacks suppressed Oct 2 22:03:15.691891 kernel: audit: type=1400 audit(1696284195.685:1084): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.725350 kernel: audit: type=1400 audit(1696284195.685:1085): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.743005 kernel: audit: type=1400 audit(1696284195.685:1086): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.762396 kernel: audit: type=1400 audit(1696284195.685:1087): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.780748 kernel: audit: type=1400 audit(1696284195.685:1088): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.800318 kernel: audit: type=1400 audit(1696284195.685:1089): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.819209 kernel: audit: type=1400 audit(1696284195.685:1090): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.838695 kernel: audit: type=1400 audit(1696284195.685:1091): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.856774 kernel: audit: type=1400 audit(1696284195.685:1092): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.859570 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104-rootfs.mount: Deactivated successfully. Oct 2 22:03:15.862047 env[1377]: time="2023-10-02T22:03:15.862007626Z" level=info msg="StartContainer for \"271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7\" returns successfully" Oct 2 22:03:15.690000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.883093 kernel: audit: type=1400 audit(1696284195.690:1093): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.888268 kubelet[2531]: I1002 22:03:15.888243 2531 scope.go:115] "RemoveContainer" containerID="d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d" Oct 2 22:03:15.690000 audit: BPF prog-id=128 op=LOAD Oct 2 22:03:15.708000 audit[2972]: AVC avc: denied { bpf } for pid=2972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.708000 audit[2972]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2674 pid=2972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:15.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237316232353763663839656638656466666634356561303835376337 Oct 2 22:03:15.708000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.708000 audit[2972]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2674 pid=2972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:15.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237316232353763663839656638656466666634356561303835376337 Oct 2 22:03:15.708000 audit[2972]: AVC avc: denied { bpf } for pid=2972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.708000 audit[2972]: AVC avc: denied { bpf } for pid=2972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.708000 audit[2972]: AVC avc: denied { bpf } for pid=2972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.708000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.708000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.708000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.708000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.708000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.708000 audit[2972]: AVC avc: denied { bpf } for pid=2972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.708000 audit[2972]: AVC avc: denied { bpf } for pid=2972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.708000 audit: BPF prog-id=129 op=LOAD Oct 2 22:03:15.708000 audit[2972]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2674 pid=2972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:15.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237316232353763663839656638656466666634356561303835376337 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { bpf } for pid=2972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { bpf } for pid=2972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { bpf } for pid=2972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { bpf } for pid=2972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit: BPF prog-id=130 op=LOAD Oct 2 22:03:15.724000 audit[2972]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2674 pid=2972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:15.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237316232353763663839656638656466666634356561303835376337 Oct 2 22:03:15.724000 audit: BPF prog-id=130 op=UNLOAD Oct 2 22:03:15.724000 audit: BPF prog-id=129 op=UNLOAD Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { bpf } for pid=2972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { bpf } for pid=2972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { bpf } for pid=2972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { perfmon } for pid=2972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { bpf } for pid=2972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit[2972]: AVC avc: denied { bpf } for pid=2972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:15.724000 audit: BPF prog-id=131 op=LOAD Oct 2 22:03:15.724000 audit[2972]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2674 pid=2972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:15.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237316232353763663839656638656466666634356561303835376337 Oct 2 22:03:15.828000 audit[2984]: AVC avc: denied { map_create } for pid=2984 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c675,c785 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c675,c785 tclass=bpf permissive=0 Oct 2 22:03:15.828000 audit[2984]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=4000581768 a2=48 a3=0 items=0 ppid=2674 pid=2984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c675,c785 key=(null) Oct 2 22:03:15.828000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 22:03:15.889996 kubelet[2531]: I1002 22:03:15.888446 2531 scope.go:115] "RemoveContainer" containerID="d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d" Oct 2 22:03:15.891083 env[1377]: time="2023-10-02T22:03:15.891043373Z" level=info msg="RemoveContainer for \"d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d\"" Oct 2 22:03:15.891680 env[1377]: time="2023-10-02T22:03:15.891650142Z" level=info msg="RemoveContainer for \"d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d\"" Oct 2 22:03:15.891893 env[1377]: time="2023-10-02T22:03:15.891862051Z" level=error msg="RemoveContainer for \"d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d\" failed" error="failed to set removing state for container \"d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d\": container is already in removing state" Oct 2 22:03:15.892090 kubelet[2531]: E1002 22:03:15.892069 2531 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d\": container is already in removing state" containerID="d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d" Oct 2 22:03:15.892157 kubelet[2531]: I1002 22:03:15.892111 2531 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d} err="rpc error: code = Unknown desc = failed to set removing state for container \"d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d\": container is already in removing state" Oct 2 22:03:15.902324 env[1377]: time="2023-10-02T22:03:15.902290635Z" level=info msg="RemoveContainer for \"d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d\" returns successfully" Oct 2 22:03:15.903119 kubelet[2531]: E1002 22:03:15.902940 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:03:16.895533 kubelet[2531]: E1002 22:03:16.895509 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:03:16.908931 kubelet[2531]: I1002 22:03:16.908904 2531 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-mxdlq" podStartSLOduration=-9.223372023945904e+09 pod.CreationTimestamp="2023-10-02 22:03:04 +0000 UTC" firstStartedPulling="2023-10-02 22:03:05.64803617 +0000 UTC m=+14.185172948" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 22:03:15.924688923 +0000 UTC m=+24.461825701" watchObservedRunningTime="2023-10-02 22:03:16.908871996 +0000 UTC m=+25.446008814" Oct 2 22:03:17.093618 kubelet[2531]: W1002 22:03:17.093583 2531 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod78dfb957_827a_4569_93f2_9f09a6bc01b5.slice/cri-containerd-d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d.scope WatchSource:0}: container "d5650a64749877949f595459fd76ddc4e2700d984e77dcc62ad8a1e8038eee0d" in namespace "k8s.io": not found Oct 2 22:03:20.201247 kubelet[2531]: W1002 22:03:20.201214 2531 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod78dfb957_827a_4569_93f2_9f09a6bc01b5.slice/cri-containerd-2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104.scope WatchSource:0}: task 2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104 not found: not found Oct 2 22:03:28.785265 env[1377]: time="2023-10-02T22:03:28.785215174Z" level=info msg="CreateContainer within sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 22:03:28.806444 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4135495084.mount: Deactivated successfully. Oct 2 22:03:28.820471 env[1377]: time="2023-10-02T22:03:28.820340945Z" level=info msg="CreateContainer within sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92\"" Oct 2 22:03:28.821784 env[1377]: time="2023-10-02T22:03:28.820973278Z" level=info msg="StartContainer for \"cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92\"" Oct 2 22:03:28.848237 systemd[1]: Started cri-containerd-cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92.scope. Oct 2 22:03:28.862553 systemd[1]: cri-containerd-cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92.scope: Deactivated successfully. Oct 2 22:03:29.215705 env[1377]: time="2023-10-02T22:03:29.215650572Z" level=info msg="shim disconnected" id=cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92 Oct 2 22:03:29.215705 env[1377]: time="2023-10-02T22:03:29.215700810Z" level=warning msg="cleaning up after shim disconnected" id=cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92 namespace=k8s.io Oct 2 22:03:29.215705 env[1377]: time="2023-10-02T22:03:29.215710170Z" level=info msg="cleaning up dead shim" Oct 2 22:03:29.228078 env[1377]: time="2023-10-02T22:03:29.228041101Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:03:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3028 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:03:29Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:03:29.228458 env[1377]: time="2023-10-02T22:03:29.228411526Z" level=error msg="copy shim log" error="read /proc/self/fd/98: file already closed" Oct 2 22:03:29.229390 env[1377]: time="2023-10-02T22:03:29.228813109Z" level=error msg="Failed to pipe stdout of container \"cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92\"" error="reading from a closed fifo" Oct 2 22:03:29.229518 env[1377]: time="2023-10-02T22:03:29.229182934Z" level=error msg="Failed to pipe stderr of container \"cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92\"" error="reading from a closed fifo" Oct 2 22:03:29.233398 env[1377]: time="2023-10-02T22:03:29.233361402Z" level=error msg="StartContainer for \"cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:03:29.233681 kubelet[2531]: E1002 22:03:29.233654 2531 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92" Oct 2 22:03:29.233993 kubelet[2531]: E1002 22:03:29.233789 2531 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:03:29.233993 kubelet[2531]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:03:29.233993 kubelet[2531]: rm /hostbin/cilium-mount Oct 2 22:03:29.233993 kubelet[2531]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xz46n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:03:29.234117 kubelet[2531]: E1002 22:03:29.233824 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:03:29.804009 systemd[1]: run-containerd-runc-k8s.io-cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92-runc.VfUk7c.mount: Deactivated successfully. Oct 2 22:03:29.804099 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92-rootfs.mount: Deactivated successfully. Oct 2 22:03:29.914719 kubelet[2531]: I1002 22:03:29.914690 2531 scope.go:115] "RemoveContainer" containerID="2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104" Oct 2 22:03:29.915175 kubelet[2531]: I1002 22:03:29.915047 2531 scope.go:115] "RemoveContainer" containerID="2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104" Oct 2 22:03:29.917371 env[1377]: time="2023-10-02T22:03:29.917340068Z" level=info msg="RemoveContainer for \"2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104\"" Oct 2 22:03:29.917996 env[1377]: time="2023-10-02T22:03:29.917965522Z" level=info msg="RemoveContainer for \"2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104\"" Oct 2 22:03:29.918067 env[1377]: time="2023-10-02T22:03:29.918032359Z" level=error msg="RemoveContainer for \"2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104\" failed" error="failed to set removing state for container \"2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104\": container is already in removing state" Oct 2 22:03:29.920784 kubelet[2531]: E1002 22:03:29.918194 2531 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104\": container is already in removing state" containerID="2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104" Oct 2 22:03:29.920784 kubelet[2531]: E1002 22:03:29.918228 2531 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104": container is already in removing state; Skipping pod "cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)" Oct 2 22:03:29.920784 kubelet[2531]: E1002 22:03:29.918508 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:03:29.935459 env[1377]: time="2023-10-02T22:03:29.935421882Z" level=info msg="RemoveContainer for \"2c8ed5c091d3cd19104b245cb64bddac49c2da066cc8fc370ebe578d4de60104\" returns successfully" Oct 2 22:03:32.318510 kubelet[2531]: W1002 22:03:32.318470 2531 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod78dfb957_827a_4569_93f2_9f09a6bc01b5.slice/cri-containerd-cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92.scope WatchSource:0}: task cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92 not found: not found Oct 2 22:03:41.782561 kubelet[2531]: E1002 22:03:41.782511 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:03:48.202000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:48.209621 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 22:03:48.209742 kernel: audit: type=1400 audit(1696284228.202:1103): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:48.202000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4007e68390 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:03:48.262922 kernel: audit: type=1300 audit(1696284228.202:1103): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4007e68390 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:03:48.202000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:48.287806 kernel: audit: type=1327 audit(1696284228.202:1103): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:48.287919 kernel: audit: type=1400 audit(1696284228.202:1104): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:48.202000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:48.202000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400a4c3ba0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:03:48.337418 kernel: audit: type=1300 audit(1696284228.202:1104): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400a4c3ba0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:03:48.202000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:48.361399 kernel: audit: type=1327 audit(1696284228.202:1104): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:48.203000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:48.384499 kernel: audit: type=1400 audit(1696284228.203:1105): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:48.384616 kernel: audit: type=1300 audit(1696284228.203:1105): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4006ebf3b0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:03:48.203000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4006ebf3b0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:03:48.203000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:48.437457 kernel: audit: type=1327 audit(1696284228.203:1105): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:48.437562 kernel: audit: type=1400 audit(1696284228.212:1106): avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:48.212000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:48.212000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40025d4fc0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:03:48.212000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:48.217000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:48.217000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4007e68450 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:03:48.217000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:48.218000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:48.218000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002642840 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:03:48.218000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:48.379000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:48.379000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4006ebf5f0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:03:48.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:48.379000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:48.379000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400a50d820 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:03:48.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:50.972000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:50.972000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400268e320 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:03:50.972000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:50.973000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:50.973000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002642980 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:03:50.973000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:50.981000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:50.981000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:50.981000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400268e540 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:03:50.981000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:50.981000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=40026429a0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:03:50.981000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:56.784800 env[1377]: time="2023-10-02T22:03:56.783917492Z" level=info msg="CreateContainer within sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 22:03:56.805792 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount61213841.mount: Deactivated successfully. Oct 2 22:03:56.810805 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2299550579.mount: Deactivated successfully. Oct 2 22:03:56.826434 env[1377]: time="2023-10-02T22:03:56.826374665Z" level=info msg="CreateContainer within sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039\"" Oct 2 22:03:56.826987 env[1377]: time="2023-10-02T22:03:56.826922568Z" level=info msg="StartContainer for \"46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039\"" Oct 2 22:03:56.849129 systemd[1]: Started cri-containerd-46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039.scope. Oct 2 22:03:56.864206 systemd[1]: cri-containerd-46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039.scope: Deactivated successfully. Oct 2 22:03:56.899996 env[1377]: time="2023-10-02T22:03:56.899936400Z" level=info msg="shim disconnected" id=46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039 Oct 2 22:03:56.899996 env[1377]: time="2023-10-02T22:03:56.899996719Z" level=warning msg="cleaning up after shim disconnected" id=46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039 namespace=k8s.io Oct 2 22:03:56.900189 env[1377]: time="2023-10-02T22:03:56.900005798Z" level=info msg="cleaning up dead shim" Oct 2 22:03:56.912304 env[1377]: time="2023-10-02T22:03:56.912257261Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:03:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3069 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:03:56Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:03:56.912545 env[1377]: time="2023-10-02T22:03:56.912495454Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 22:03:56.913327 env[1377]: time="2023-10-02T22:03:56.913288429Z" level=error msg="Failed to pipe stdout of container \"46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039\"" error="reading from a closed fifo" Oct 2 22:03:56.913382 env[1377]: time="2023-10-02T22:03:56.913355267Z" level=error msg="Failed to pipe stderr of container \"46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039\"" error="reading from a closed fifo" Oct 2 22:03:56.916972 env[1377]: time="2023-10-02T22:03:56.916907758Z" level=error msg="StartContainer for \"46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:03:56.917203 kubelet[2531]: E1002 22:03:56.917160 2531 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039" Oct 2 22:03:56.917450 kubelet[2531]: E1002 22:03:56.917290 2531 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:03:56.917450 kubelet[2531]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:03:56.917450 kubelet[2531]: rm /hostbin/cilium-mount Oct 2 22:03:56.917450 kubelet[2531]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xz46n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:03:56.918624 kubelet[2531]: E1002 22:03:56.918582 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:03:56.959043 kubelet[2531]: I1002 22:03:56.959014 2531 scope.go:115] "RemoveContainer" containerID="cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92" Oct 2 22:03:56.959417 kubelet[2531]: I1002 22:03:56.959382 2531 scope.go:115] "RemoveContainer" containerID="cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92" Oct 2 22:03:56.973310 env[1377]: time="2023-10-02T22:03:56.973212425Z" level=info msg="RemoveContainer for \"cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92\"" Oct 2 22:03:56.975111 env[1377]: time="2023-10-02T22:03:56.975079767Z" level=info msg="RemoveContainer for \"cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92\"" Oct 2 22:03:56.975199 env[1377]: time="2023-10-02T22:03:56.975168644Z" level=error msg="RemoveContainer for \"cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92\" failed" error="failed to set removing state for container \"cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92\": container is already in removing state" Oct 2 22:03:56.975866 kubelet[2531]: E1002 22:03:56.975319 2531 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92\": container is already in removing state" containerID="cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92" Oct 2 22:03:56.975866 kubelet[2531]: E1002 22:03:56.975352 2531 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92": container is already in removing state; Skipping pod "cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)" Oct 2 22:03:56.975866 kubelet[2531]: E1002 22:03:56.975599 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:03:56.985219 env[1377]: time="2023-10-02T22:03:56.985183576Z" level=info msg="RemoveContainer for \"cff2ef3582448b2ec2902e766768b5244e3fb72c3d01a7b046020ad0e1bbef92\" returns successfully" Oct 2 22:03:57.803844 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039-rootfs.mount: Deactivated successfully. Oct 2 22:04:00.003974 kubelet[2531]: W1002 22:04:00.003931 2531 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod78dfb957_827a_4569_93f2_9f09a6bc01b5.slice/cri-containerd-46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039.scope WatchSource:0}: task 46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039 not found: not found Oct 2 22:04:08.783235 kubelet[2531]: E1002 22:04:08.783153 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:04:19.782654 kubelet[2531]: E1002 22:04:19.782608 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:04:34.781834 kubelet[2531]: E1002 22:04:34.781801 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:04:45.784721 env[1377]: time="2023-10-02T22:04:45.784461829Z" level=info msg="CreateContainer within sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 22:04:45.807460 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1719910821.mount: Deactivated successfully. Oct 2 22:04:45.812078 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3862546583.mount: Deactivated successfully. Oct 2 22:04:45.825184 env[1377]: time="2023-10-02T22:04:45.825120416Z" level=info msg="CreateContainer within sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609\"" Oct 2 22:04:45.827058 env[1377]: time="2023-10-02T22:04:45.827032284Z" level=info msg="StartContainer for \"46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609\"" Oct 2 22:04:45.849505 systemd[1]: Started cri-containerd-46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609.scope. Oct 2 22:04:45.864902 systemd[1]: cri-containerd-46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609.scope: Deactivated successfully. Oct 2 22:04:45.878789 env[1377]: time="2023-10-02T22:04:45.878729590Z" level=info msg="shim disconnected" id=46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609 Oct 2 22:04:45.879024 env[1377]: time="2023-10-02T22:04:45.879008314Z" level=warning msg="cleaning up after shim disconnected" id=46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609 namespace=k8s.io Oct 2 22:04:45.879111 env[1377]: time="2023-10-02T22:04:45.879098795Z" level=info msg="cleaning up dead shim" Oct 2 22:04:45.893819 env[1377]: time="2023-10-02T22:04:45.893777807Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:04:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3114 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:04:45Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:04:45.894191 env[1377]: time="2023-10-02T22:04:45.894142573Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 22:04:45.896827 env[1377]: time="2023-10-02T22:04:45.895815397Z" level=error msg="Failed to pipe stdout of container \"46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609\"" error="reading from a closed fifo" Oct 2 22:04:45.897130 env[1377]: time="2023-10-02T22:04:45.896930973Z" level=error msg="Failed to pipe stderr of container \"46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609\"" error="reading from a closed fifo" Oct 2 22:04:45.900342 env[1377]: time="2023-10-02T22:04:45.900308382Z" level=error msg="StartContainer for \"46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:04:45.900616 kubelet[2531]: E1002 22:04:45.900585 2531 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609" Oct 2 22:04:45.900901 kubelet[2531]: E1002 22:04:45.900704 2531 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:04:45.900901 kubelet[2531]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:04:45.900901 kubelet[2531]: rm /hostbin/cilium-mount Oct 2 22:04:45.900901 kubelet[2531]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xz46n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:04:45.901019 kubelet[2531]: E1002 22:04:45.900747 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:04:46.032452 kubelet[2531]: I1002 22:04:46.032427 2531 scope.go:115] "RemoveContainer" containerID="46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039" Oct 2 22:04:46.032958 kubelet[2531]: I1002 22:04:46.032940 2531 scope.go:115] "RemoveContainer" containerID="46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039" Oct 2 22:04:46.034087 env[1377]: time="2023-10-02T22:04:46.034041456Z" level=info msg="RemoveContainer for \"46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039\"" Oct 2 22:04:46.041358 env[1377]: time="2023-10-02T22:04:46.038079112Z" level=info msg="RemoveContainer for \"46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039\"" Oct 2 22:04:46.041358 env[1377]: time="2023-10-02T22:04:46.038180314Z" level=error msg="RemoveContainer for \"46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039\" failed" error="failed to set removing state for container \"46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039\": container is already in removing state" Oct 2 22:04:46.041475 kubelet[2531]: E1002 22:04:46.040917 2531 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039\": container is already in removing state" containerID="46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039" Oct 2 22:04:46.041475 kubelet[2531]: E1002 22:04:46.040943 2531 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039": container is already in removing state; Skipping pod "cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)" Oct 2 22:04:46.041475 kubelet[2531]: E1002 22:04:46.041225 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:04:46.046120 env[1377]: time="2023-10-02T22:04:46.046067623Z" level=info msg="RemoveContainer for \"46f772f302efb8426f30a4787c963faed6490b4a502f44c6a804dbbc9558a039\" returns successfully" Oct 2 22:04:46.805721 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609-rootfs.mount: Deactivated successfully. Oct 2 22:04:48.203000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:48.209753 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 22:04:48.209893 kernel: audit: type=1400 audit(1696284288.203:1115): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:48.203000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:48.256472 kernel: audit: type=1400 audit(1696284288.203:1116): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:48.256726 kernel: audit: type=1300 audit(1696284288.203:1116): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400e76ee00 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:04:48.203000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400e76ee00 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:04:48.203000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:48.308865 kernel: audit: type=1327 audit(1696284288.203:1116): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:48.308956 kernel: audit: type=1300 audit(1696284288.203:1115): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400e63d170 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:04:48.203000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400e63d170 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:04:48.203000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:48.360622 kernel: audit: type=1327 audit(1696284288.203:1115): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:48.204000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:48.382778 kernel: audit: type=1400 audit(1696284288.204:1117): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:48.382937 kernel: audit: type=1300 audit(1696284288.204:1117): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400e63d1d0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:04:48.204000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400e63d1d0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:04:48.204000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:48.434639 kernel: audit: type=1327 audit(1696284288.204:1117): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:48.218000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:48.457529 kernel: audit: type=1400 audit(1696284288.218:1118): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:48.218000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400e63d2f0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:04:48.218000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:48.232000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:48.232000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400145bf20 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:04:48.232000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:04:48.232000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:48.232000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001f4d080 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:04:48.232000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:04:48.381000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:48.381000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400e76ef20 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:04:48.381000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:48.381000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:48.381000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400e7903f0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:04:48.381000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:48.984198 kubelet[2531]: W1002 22:04:48.984165 2531 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod78dfb957_827a_4569_93f2_9f09a6bc01b5.slice/cri-containerd-46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609.scope WatchSource:0}: task 46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609 not found: not found Oct 2 22:04:50.973000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:50.973000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002acb660 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:04:50.973000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:04:50.975000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:50.975000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001f4d380 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:04:50.975000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:04:50.981000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:50.981000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:50.981000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001f4d3a0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:04:50.981000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:04:50.981000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002acb780 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:04:50.981000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:04:51.687989 kubelet[2531]: E1002 22:04:51.687951 2531 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 22:04:51.724538 kubelet[2531]: E1002 22:04:51.724519 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:04:56.726342 kubelet[2531]: E1002 22:04:56.726316 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:04:57.783217 kubelet[2531]: E1002 22:04:57.783193 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:05:01.727615 kubelet[2531]: E1002 22:05:01.727587 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:06.729258 kubelet[2531]: E1002 22:05:06.729190 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:09.782429 kubelet[2531]: E1002 22:05:09.782386 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:05:11.730612 kubelet[2531]: E1002 22:05:11.730552 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:16.731836 kubelet[2531]: E1002 22:05:16.731803 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:20.781920 kubelet[2531]: E1002 22:05:20.781888 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:05:21.733055 kubelet[2531]: E1002 22:05:21.733021 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:26.734133 kubelet[2531]: E1002 22:05:26.734103 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:30.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.19:22-10.200.12.6:35078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:05:30.770304 systemd[1]: Started sshd@7-10.200.20.19:22-10.200.12.6:35078.service. Oct 2 22:05:30.775838 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 22:05:30.775930 kernel: audit: type=1130 audit(1696284330.769:1127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.19:22-10.200.12.6:35078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:05:31.211000 audit[3133]: USER_ACCT pid=3133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:31.212729 sshd[3133]: Accepted publickey for core from 10.200.12.6 port 35078 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:05:31.236834 kernel: audit: type=1101 audit(1696284331.211:1128): pid=3133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:31.237594 sshd[3133]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:05:31.236000 audit[3133]: CRED_ACQ pid=3133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:31.274756 kernel: audit: type=1103 audit(1696284331.236:1129): pid=3133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:31.274955 kernel: audit: type=1006 audit(1696284331.236:1130): pid=3133 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 22:05:31.236000 audit[3133]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdaf970c0 a2=3 a3=1 items=0 ppid=1 pid=3133 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:05:31.300038 kernel: audit: type=1300 audit(1696284331.236:1130): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdaf970c0 a2=3 a3=1 items=0 ppid=1 pid=3133 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:05:31.236000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:05:31.308692 kernel: audit: type=1327 audit(1696284331.236:1130): proctitle=737368643A20636F7265205B707269765D Oct 2 22:05:31.311691 systemd[1]: Started session-10.scope. Oct 2 22:05:31.312649 systemd-logind[1367]: New session 10 of user core. Oct 2 22:05:31.316000 audit[3133]: USER_START pid=3133 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:31.319000 audit[3135]: CRED_ACQ pid=3135 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:31.366912 kernel: audit: type=1105 audit(1696284331.316:1131): pid=3133 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:31.366998 kernel: audit: type=1103 audit(1696284331.319:1132): pid=3135 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:31.687586 sshd[3133]: pam_unix(sshd:session): session closed for user core Oct 2 22:05:31.687000 audit[3133]: USER_END pid=3133 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:31.691333 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 22:05:31.692231 systemd[1]: sshd@7-10.200.20.19:22-10.200.12.6:35078.service: Deactivated successfully. Oct 2 22:05:31.687000 audit[3133]: CRED_DISP pid=3133 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:31.735791 kubelet[2531]: E1002 22:05:31.735697 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:31.736803 kernel: audit: type=1106 audit(1696284331.687:1133): pid=3133 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:31.736870 kernel: audit: type=1104 audit(1696284331.687:1134): pid=3133 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:31.737055 systemd-logind[1367]: Session 10 logged out. Waiting for processes to exit. Oct 2 22:05:31.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.19:22-10.200.12.6:35078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:05:31.737992 systemd-logind[1367]: Removed session 10. Oct 2 22:05:32.781961 kubelet[2531]: E1002 22:05:32.781930 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:05:36.737349 kubelet[2531]: E1002 22:05:36.737167 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:41.738443 kubelet[2531]: E1002 22:05:41.738379 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:41.753968 systemd[1]: Started sshd@8-10.200.20.19:22-10.200.12.6:47612.service. Oct 2 22:05:41.781574 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:05:41.781671 kernel: audit: type=1130 audit(1696284341.753:1136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.19:22-10.200.12.6:47612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:05:41.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.19:22-10.200.12.6:47612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:05:42.158000 audit[3148]: USER_ACCT pid=3148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:42.159348 sshd[3148]: Accepted publickey for core from 10.200.12.6 port 47612 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:05:42.161707 sshd[3148]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:05:42.160000 audit[3148]: CRED_ACQ pid=3148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:42.208604 kernel: audit: type=1101 audit(1696284342.158:1137): pid=3148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:42.208700 kernel: audit: type=1103 audit(1696284342.160:1138): pid=3148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:42.224235 kernel: audit: type=1006 audit(1696284342.160:1139): pid=3148 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 22:05:42.225186 kernel: audit: type=1300 audit(1696284342.160:1139): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffceb83cd0 a2=3 a3=1 items=0 ppid=1 pid=3148 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:05:42.160000 audit[3148]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffceb83cd0 a2=3 a3=1 items=0 ppid=1 pid=3148 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:05:42.160000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:05:42.259258 kernel: audit: type=1327 audit(1696284342.160:1139): proctitle=737368643A20636F7265205B707269765D Oct 2 22:05:42.262078 systemd-logind[1367]: New session 11 of user core. Oct 2 22:05:42.262490 systemd[1]: Started session-11.scope. Oct 2 22:05:42.265000 audit[3148]: USER_START pid=3148 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:42.294741 kernel: audit: type=1105 audit(1696284342.265:1140): pid=3148 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:42.294854 kernel: audit: type=1103 audit(1696284342.293:1141): pid=3150 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:42.293000 audit[3150]: CRED_ACQ pid=3150 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:42.607960 sshd[3148]: pam_unix(sshd:session): session closed for user core Oct 2 22:05:42.608000 audit[3148]: USER_END pid=3148 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:42.635065 systemd[1]: sshd@8-10.200.20.19:22-10.200.12.6:47612.service: Deactivated successfully. Oct 2 22:05:42.608000 audit[3148]: CRED_DISP pid=3148 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:42.657116 kernel: audit: type=1106 audit(1696284342.608:1142): pid=3148 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:42.657326 kernel: audit: type=1104 audit(1696284342.608:1143): pid=3148 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:42.635831 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 22:05:42.636701 systemd-logind[1367]: Session 11 logged out. Waiting for processes to exit. Oct 2 22:05:42.637487 systemd-logind[1367]: Removed session 11. Oct 2 22:05:42.634000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.19:22-10.200.12.6:47612 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:05:46.739906 kubelet[2531]: E1002 22:05:46.739869 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:46.781630 kubelet[2531]: E1002 22:05:46.781607 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:05:48.204000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:48.209945 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:05:48.210071 kernel: audit: type=1400 audit(1696284348.204:1145): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:48.204000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4003f38bc0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:05:48.261433 kernel: audit: type=1300 audit(1696284348.204:1145): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4003f38bc0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:05:48.204000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:48.286470 kernel: audit: type=1327 audit(1696284348.204:1145): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:48.286625 kernel: audit: type=1400 audit(1696284348.205:1146): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:48.205000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:48.205000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4009047f20 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:05:48.339809 kernel: audit: type=1300 audit(1696284348.205:1146): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4009047f20 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:05:48.205000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:48.364050 kernel: audit: type=1327 audit(1696284348.205:1146): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:48.364131 kernel: audit: type=1400 audit(1696284348.205:1147): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:48.205000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:48.205000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4009047f50 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:05:48.415269 kernel: audit: type=1300 audit(1696284348.205:1147): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4009047f50 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:05:48.205000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:48.439773 kernel: audit: type=1327 audit(1696284348.205:1147): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:48.439883 kernel: audit: type=1400 audit(1696284348.219:1148): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:48.219000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:48.219000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40096842a0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:05:48.219000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:48.260000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:48.260000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000fd96c0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:05:48.260000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:05:48.260000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:48.260000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001a3f500 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:05:48.260000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:05:48.382000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:48.382000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4009684660 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:05:48.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:48.382000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:48.382000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4003f39200 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:05:48.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:50.974000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:50.974000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001d5f660 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:05:50.974000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:05:50.975000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:50.975000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001d5f680 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:05:50.975000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:05:50.982000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:50.982000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001d5f7a0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:05:50.982000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:05:50.982000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:50.982000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40011dc920 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:05:50.982000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:05:51.741468 kubelet[2531]: E1002 22:05:51.741435 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:52.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.19:22-10.200.12.6:48616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:05:52.675993 systemd[1]: Started sshd@9-10.200.20.19:22-10.200.12.6:48616.service. Oct 2 22:05:53.075000 audit[3162]: USER_ACCT pid=3162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:53.076578 sshd[3162]: Accepted publickey for core from 10.200.12.6 port 48616 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:05:53.077000 audit[3162]: CRED_ACQ pid=3162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:53.077000 audit[3162]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc52c160 a2=3 a3=1 items=0 ppid=1 pid=3162 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:05:53.077000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:05:53.078574 sshd[3162]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:05:53.082856 systemd[1]: Started session-12.scope. Oct 2 22:05:53.083148 systemd-logind[1367]: New session 12 of user core. Oct 2 22:05:53.086000 audit[3162]: USER_START pid=3162 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:53.089000 audit[3164]: CRED_ACQ pid=3164 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:53.434582 sshd[3162]: pam_unix(sshd:session): session closed for user core Oct 2 22:05:53.435000 audit[3162]: USER_END pid=3162 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:53.438603 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 22:05:53.439244 systemd[1]: sshd@9-10.200.20.19:22-10.200.12.6:48616.service: Deactivated successfully. Oct 2 22:05:53.441257 kernel: kauditd_printk_skb: 34 callbacks suppressed Oct 2 22:05:53.441307 kernel: audit: type=1106 audit(1696284353.435:1163): pid=3162 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:53.442057 systemd-logind[1367]: Session 12 logged out. Waiting for processes to exit. Oct 2 22:05:53.442907 systemd-logind[1367]: Removed session 12. Oct 2 22:05:53.435000 audit[3162]: CRED_DISP pid=3162 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:53.490886 kernel: audit: type=1104 audit(1696284353.435:1164): pid=3162 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:05:53.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.19:22-10.200.12.6:48616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:05:53.512179 kernel: audit: type=1131 audit(1696284353.435:1165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.19:22-10.200.12.6:48616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:05:56.742410 kubelet[2531]: E1002 22:05:56.742382 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:01.743902 kubelet[2531]: E1002 22:06:01.743878 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:01.782571 kubelet[2531]: E1002 22:06:01.782532 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:06:03.509000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.19:22-10.200.12.6:53324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:03.509645 systemd[1]: Started sshd@10-10.200.20.19:22-10.200.12.6:53324.service. Oct 2 22:06:03.532820 kernel: audit: type=1130 audit(1696284363.509:1166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.19:22-10.200.12.6:53324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:03.947000 audit[3174]: USER_ACCT pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:03.956095 sshd[3174]: Accepted publickey for core from 10.200.12.6 port 53324 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:06:03.955781 sshd[3174]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:06:03.953000 audit[3174]: CRED_ACQ pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:03.995473 kernel: audit: type=1101 audit(1696284363.947:1167): pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:03.995555 kernel: audit: type=1103 audit(1696284363.953:1168): pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:03.998727 systemd[1]: Started session-13.scope. Oct 2 22:06:03.999878 systemd-logind[1367]: New session 13 of user core. Oct 2 22:06:04.010350 kernel: audit: type=1006 audit(1696284363.953:1169): pid=3174 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 22:06:03.953000 audit[3174]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff610d9b0 a2=3 a3=1 items=0 ppid=1 pid=3174 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:04.034848 kernel: audit: type=1300 audit(1696284363.953:1169): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff610d9b0 a2=3 a3=1 items=0 ppid=1 pid=3174 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:03.953000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:04.043884 kernel: audit: type=1327 audit(1696284363.953:1169): proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:04.034000 audit[3174]: USER_START pid=3174 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:04.070778 kernel: audit: type=1105 audit(1696284364.034:1170): pid=3174 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:04.070913 kernel: audit: type=1103 audit(1696284364.034:1171): pid=3176 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:04.034000 audit[3176]: CRED_ACQ pid=3176 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:04.355992 sshd[3174]: pam_unix(sshd:session): session closed for user core Oct 2 22:06:04.356000 audit[3174]: USER_END pid=3174 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:04.356000 audit[3174]: CRED_DISP pid=3174 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:04.383649 systemd[1]: sshd@10-10.200.20.19:22-10.200.12.6:53324.service: Deactivated successfully. Oct 2 22:06:04.384398 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 22:06:04.385810 systemd-logind[1367]: Session 13 logged out. Waiting for processes to exit. Oct 2 22:06:04.386666 systemd-logind[1367]: Removed session 13. Oct 2 22:06:04.404795 kernel: audit: type=1106 audit(1696284364.356:1172): pid=3174 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:04.404908 kernel: audit: type=1104 audit(1696284364.356:1173): pid=3174 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:04.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.19:22-10.200.12.6:53324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:06.745636 kubelet[2531]: E1002 22:06:06.745607 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:11.746953 kubelet[2531]: E1002 22:06:11.746916 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:13.785806 env[1377]: time="2023-10-02T22:06:13.785731054Z" level=info msg="CreateContainer within sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 22:06:13.817665 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount339055448.mount: Deactivated successfully. Oct 2 22:06:13.833794 env[1377]: time="2023-10-02T22:06:13.833725074Z" level=info msg="CreateContainer within sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5\"" Oct 2 22:06:13.834470 env[1377]: time="2023-10-02T22:06:13.834198390Z" level=info msg="StartContainer for \"f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5\"" Oct 2 22:06:13.856063 systemd[1]: Started cri-containerd-f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5.scope. Oct 2 22:06:13.871436 systemd[1]: cri-containerd-f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5.scope: Deactivated successfully. Oct 2 22:06:13.893322 env[1377]: time="2023-10-02T22:06:13.893273984Z" level=info msg="shim disconnected" id=f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5 Oct 2 22:06:13.893588 env[1377]: time="2023-10-02T22:06:13.893559501Z" level=warning msg="cleaning up after shim disconnected" id=f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5 namespace=k8s.io Oct 2 22:06:13.893683 env[1377]: time="2023-10-02T22:06:13.893668900Z" level=info msg="cleaning up dead shim" Oct 2 22:06:13.905942 env[1377]: time="2023-10-02T22:06:13.905894103Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:06:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3212 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:06:13Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:06:13.906184 env[1377]: time="2023-10-02T22:06:13.906130621Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 22:06:13.906356 env[1377]: time="2023-10-02T22:06:13.906326219Z" level=error msg="Failed to pipe stdout of container \"f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5\"" error="reading from a closed fifo" Oct 2 22:06:13.908543 env[1377]: time="2023-10-02T22:06:13.908507398Z" level=error msg="Failed to pipe stderr of container \"f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5\"" error="reading from a closed fifo" Oct 2 22:06:13.912572 env[1377]: time="2023-10-02T22:06:13.912532280Z" level=error msg="StartContainer for \"f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:06:13.912807 kubelet[2531]: E1002 22:06:13.912783 2531 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5" Oct 2 22:06:13.913080 kubelet[2531]: E1002 22:06:13.912899 2531 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:06:13.913080 kubelet[2531]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:06:13.913080 kubelet[2531]: rm /hostbin/cilium-mount Oct 2 22:06:13.913080 kubelet[2531]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-xz46n,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:06:13.913220 kubelet[2531]: E1002 22:06:13.912943 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:06:14.169098 kubelet[2531]: I1002 22:06:14.169071 2531 scope.go:115] "RemoveContainer" containerID="46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609" Oct 2 22:06:14.169476 kubelet[2531]: I1002 22:06:14.169459 2531 scope.go:115] "RemoveContainer" containerID="46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609" Oct 2 22:06:14.171637 env[1377]: time="2023-10-02T22:06:14.171596738Z" level=info msg="RemoveContainer for \"46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609\"" Oct 2 22:06:14.180126 env[1377]: time="2023-10-02T22:06:14.173932115Z" level=info msg="RemoveContainer for \"46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609\"" Oct 2 22:06:14.180126 env[1377]: time="2023-10-02T22:06:14.174054474Z" level=error msg="RemoveContainer for \"46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609\" failed" error="failed to set removing state for container \"46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609\": container is already in removing state" Oct 2 22:06:14.180309 kubelet[2531]: E1002 22:06:14.174181 2531 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609\": container is already in removing state" containerID="46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609" Oct 2 22:06:14.180309 kubelet[2531]: I1002 22:06:14.174230 2531 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609} err="rpc error: code = Unknown desc = failed to set removing state for container \"46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609\": container is already in removing state" Oct 2 22:06:14.190709 env[1377]: time="2023-10-02T22:06:14.190660593Z" level=info msg="RemoveContainer for \"46498c6a26c949d7a293cf9aa98e92c5446861254efb0bb7039ff2f926146609\" returns successfully" Oct 2 22:06:14.191380 kubelet[2531]: E1002 22:06:14.191227 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:06:14.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.19:22-10.200.12.6:54962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:14.429604 systemd[1]: Started sshd@11-10.200.20.19:22-10.200.12.6:54962.service. Oct 2 22:06:14.434951 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:06:14.435118 kernel: audit: type=1130 audit(1696284374.428:1175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.19:22-10.200.12.6:54962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:14.813041 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5-rootfs.mount: Deactivated successfully. Oct 2 22:06:14.870000 audit[3226]: USER_ACCT pid=3226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:14.871573 sshd[3226]: Accepted publickey for core from 10.200.12.6 port 54962 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:06:14.873943 sshd[3226]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:06:14.872000 audit[3226]: CRED_ACQ pid=3226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:14.918392 kernel: audit: type=1101 audit(1696284374.870:1176): pid=3226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:14.918614 kernel: audit: type=1103 audit(1696284374.872:1177): pid=3226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:14.933884 kernel: audit: type=1006 audit(1696284374.872:1178): pid=3226 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 22:06:14.936392 kernel: audit: type=1300 audit(1696284374.872:1178): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe133dfd0 a2=3 a3=1 items=0 ppid=1 pid=3226 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:14.872000 audit[3226]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe133dfd0 a2=3 a3=1 items=0 ppid=1 pid=3226 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:14.961630 systemd[1]: Started session-14.scope. Oct 2 22:06:14.962804 systemd-logind[1367]: New session 14 of user core. Oct 2 22:06:14.872000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:14.971977 kernel: audit: type=1327 audit(1696284374.872:1178): proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:14.974000 audit[3226]: USER_START pid=3226 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:14.978000 audit[3230]: CRED_ACQ pid=3230 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:15.025303 kernel: audit: type=1105 audit(1696284374.974:1179): pid=3226 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:15.025443 kernel: audit: type=1103 audit(1696284374.978:1180): pid=3230 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:15.311989 sshd[3226]: pam_unix(sshd:session): session closed for user core Oct 2 22:06:15.312000 audit[3226]: USER_END pid=3226 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:15.315119 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 22:06:15.315884 systemd[1]: sshd@11-10.200.20.19:22-10.200.12.6:54962.service: Deactivated successfully. Oct 2 22:06:15.312000 audit[3226]: CRED_DISP pid=3226 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:15.339816 kernel: audit: type=1106 audit(1696284375.312:1181): pid=3226 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:15.339898 systemd-logind[1367]: Session 14 logged out. Waiting for processes to exit. Oct 2 22:06:15.361974 systemd-logind[1367]: Removed session 14. Oct 2 22:06:15.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.19:22-10.200.12.6:54962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:15.362789 kernel: audit: type=1104 audit(1696284375.312:1182): pid=3226 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:16.748477 kubelet[2531]: E1002 22:06:16.748453 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:16.997989 kubelet[2531]: W1002 22:06:16.997957 2531 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod78dfb957_827a_4569_93f2_9f09a6bc01b5.slice/cri-containerd-f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5.scope WatchSource:0}: task f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5 not found: not found Oct 2 22:06:21.749514 kubelet[2531]: E1002 22:06:21.749482 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:25.406440 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:06:25.406564 kernel: audit: type=1130 audit(1696284385.379:1184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.19:22-10.200.12.6:60242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:25.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.19:22-10.200.12.6:60242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:25.380310 systemd[1]: Started sshd@12-10.200.20.19:22-10.200.12.6:60242.service. Oct 2 22:06:25.786000 audit[3241]: USER_ACCT pid=3241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:25.804304 sshd[3241]: Accepted publickey for core from 10.200.12.6 port 60242 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:06:25.805132 sshd[3241]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:06:25.802000 audit[3241]: CRED_ACQ pid=3241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:25.838846 kernel: audit: type=1101 audit(1696284385.786:1185): pid=3241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:25.838982 kernel: audit: type=1103 audit(1696284385.802:1186): pid=3241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:25.843370 systemd[1]: Started session-15.scope. Oct 2 22:06:25.855721 kernel: audit: type=1006 audit(1696284385.802:1187): pid=3241 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 22:06:25.855796 systemd-logind[1367]: New session 15 of user core. Oct 2 22:06:25.802000 audit[3241]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff787a2a0 a2=3 a3=1 items=0 ppid=1 pid=3241 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:25.881729 kernel: audit: type=1300 audit(1696284385.802:1187): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff787a2a0 a2=3 a3=1 items=0 ppid=1 pid=3241 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:25.802000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:25.890724 kernel: audit: type=1327 audit(1696284385.802:1187): proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:25.893000 audit[3241]: USER_START pid=3241 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:25.893000 audit[3243]: CRED_ACQ pid=3243 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:25.945061 kernel: audit: type=1105 audit(1696284385.893:1188): pid=3241 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:25.945160 kernel: audit: type=1103 audit(1696284385.893:1189): pid=3243 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:26.196303 sshd[3241]: pam_unix(sshd:session): session closed for user core Oct 2 22:06:26.196000 audit[3241]: USER_END pid=3241 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:26.199917 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 22:06:26.200817 systemd[1]: sshd@12-10.200.20.19:22-10.200.12.6:60242.service: Deactivated successfully. Oct 2 22:06:26.196000 audit[3241]: CRED_DISP pid=3241 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:26.248863 kernel: audit: type=1106 audit(1696284386.196:1190): pid=3241 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:26.249017 kernel: audit: type=1104 audit(1696284386.196:1191): pid=3241 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:26.249009 systemd-logind[1367]: Session 15 logged out. Waiting for processes to exit. Oct 2 22:06:26.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.19:22-10.200.12.6:60242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:26.249974 systemd-logind[1367]: Removed session 15. Oct 2 22:06:26.750829 kubelet[2531]: E1002 22:06:26.750805 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:28.781878 kubelet[2531]: E1002 22:06:28.781848 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:06:31.752053 kubelet[2531]: E1002 22:06:31.752022 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:36.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.19:22-10.200.12.6:33174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:36.263902 systemd[1]: Started sshd@13-10.200.20.19:22-10.200.12.6:33174.service. Oct 2 22:06:36.269340 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:06:36.269405 kernel: audit: type=1130 audit(1696284396.262:1193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.19:22-10.200.12.6:33174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:36.670000 audit[3261]: USER_ACCT pid=3261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:36.672633 sshd[3261]: Accepted publickey for core from 10.200.12.6 port 33174 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:06:36.697615 sshd[3261]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:06:36.697887 kernel: audit: type=1101 audit(1696284396.670:1194): pid=3261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:36.697934 kernel: audit: type=1103 audit(1696284396.695:1195): pid=3261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:36.695000 audit[3261]: CRED_ACQ pid=3261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:36.733565 kernel: audit: type=1006 audit(1696284396.695:1196): pid=3261 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 22:06:36.695000 audit[3261]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3e4b000 a2=3 a3=1 items=0 ppid=1 pid=3261 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:36.753654 kubelet[2531]: E1002 22:06:36.753615 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:36.757200 kernel: audit: type=1300 audit(1696284396.695:1196): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3e4b000 a2=3 a3=1 items=0 ppid=1 pid=3261 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:36.695000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:36.765725 kernel: audit: type=1327 audit(1696284396.695:1196): proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:36.768125 systemd-logind[1367]: New session 16 of user core. Oct 2 22:06:36.768340 systemd[1]: Started session-16.scope. Oct 2 22:06:36.770000 audit[3261]: USER_START pid=3261 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:36.774000 audit[3263]: CRED_ACQ pid=3263 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:36.819461 kernel: audit: type=1105 audit(1696284396.770:1197): pid=3261 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:36.819559 kernel: audit: type=1103 audit(1696284396.774:1198): pid=3263 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:37.077056 sshd[3261]: pam_unix(sshd:session): session closed for user core Oct 2 22:06:37.076000 audit[3261]: USER_END pid=3261 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:37.080747 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 22:06:37.081580 systemd[1]: sshd@13-10.200.20.19:22-10.200.12.6:33174.service: Deactivated successfully. Oct 2 22:06:37.076000 audit[3261]: CRED_DISP pid=3261 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:37.124940 kernel: audit: type=1106 audit(1696284397.076:1199): pid=3261 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:37.125045 kernel: audit: type=1104 audit(1696284397.076:1200): pid=3261 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:37.124997 systemd-logind[1367]: Session 16 logged out. Waiting for processes to exit. Oct 2 22:06:37.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.19:22-10.200.12.6:33174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:37.125793 systemd-logind[1367]: Removed session 16. Oct 2 22:06:41.754434 kubelet[2531]: E1002 22:06:41.754403 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:42.781836 kubelet[2531]: E1002 22:06:42.781808 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:06:46.755777 kubelet[2531]: E1002 22:06:46.755732 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:47.151724 systemd[1]: Started sshd@14-10.200.20.19:22-10.200.12.6:43204.service. Oct 2 22:06:47.178649 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:06:47.178755 kernel: audit: type=1130 audit(1696284407.150:1202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.19:22-10.200.12.6:43204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:47.150000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.19:22-10.200.12.6:43204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:47.594000 audit[3274]: USER_ACCT pid=3274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:47.596875 sshd[3274]: Accepted publickey for core from 10.200.12.6 port 43204 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:06:47.598727 sshd[3274]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:06:47.596000 audit[3274]: CRED_ACQ pid=3274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:47.644721 kernel: audit: type=1101 audit(1696284407.594:1203): pid=3274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:47.644848 kernel: audit: type=1103 audit(1696284407.596:1204): pid=3274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:47.644883 kernel: audit: type=1006 audit(1696284407.596:1205): pid=3274 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 22:06:47.596000 audit[3274]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdac67db0 a2=3 a3=1 items=0 ppid=1 pid=3274 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:47.682076 kernel: audit: type=1300 audit(1696284407.596:1205): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdac67db0 a2=3 a3=1 items=0 ppid=1 pid=3274 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:47.596000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:47.690433 kernel: audit: type=1327 audit(1696284407.596:1205): proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:47.692519 systemd-logind[1367]: New session 17 of user core. Oct 2 22:06:47.692983 systemd[1]: Started session-17.scope. Oct 2 22:06:47.695000 audit[3274]: USER_START pid=3274 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:47.721000 audit[3276]: CRED_ACQ pid=3276 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:47.744239 kernel: audit: type=1105 audit(1696284407.695:1206): pid=3274 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:47.744345 kernel: audit: type=1103 audit(1696284407.721:1207): pid=3276 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:48.042903 sshd[3274]: pam_unix(sshd:session): session closed for user core Oct 2 22:06:48.042000 audit[3274]: USER_END pid=3274 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:48.073796 systemd[1]: sshd@14-10.200.20.19:22-10.200.12.6:43204.service: Deactivated successfully. Oct 2 22:06:48.074560 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 22:06:48.043000 audit[3274]: CRED_DISP pid=3274 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:48.100235 kernel: audit: type=1106 audit(1696284408.042:1208): pid=3274 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:48.100360 kernel: audit: type=1104 audit(1696284408.043:1209): pid=3274 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:48.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.19:22-10.200.12.6:43204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:48.100700 systemd-logind[1367]: Session 17 logged out. Waiting for processes to exit. Oct 2 22:06:48.101540 systemd-logind[1367]: Removed session 17. Oct 2 22:06:48.204000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:48.204000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40024847e0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:06:48.204000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:06:48.204000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:48.204000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400cf58000 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:06:48.204000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:06:48.204000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:48.204000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4007685410 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:06:48.204000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:06:48.220000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:48.220000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400cf58180 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:06:48.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:06:48.261000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:48.261000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012dda00 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:06:48.261000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:06:48.261000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:48.261000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001291950 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:06:48.261000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:06:48.383000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:48.383000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:48.383000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400cf58270 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:06:48.383000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:06:48.383000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4002484940 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:06:48.383000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:06:50.975000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:50.975000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001225fe0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:06:50.975000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:06:50.975000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:50.975000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000319c00 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:06:50.975000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:06:50.982000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:50.982000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012ddcc0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:06:50.982000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:06:50.982000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:50.982000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012ddce0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:06:50.982000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:06:51.488798 update_engine[1370]: I1002 22:06:51.488442 1370 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 22:06:51.488798 update_engine[1370]: I1002 22:06:51.488492 1370 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 22:06:51.488798 update_engine[1370]: I1002 22:06:51.488670 1370 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 22:06:51.489152 update_engine[1370]: I1002 22:06:51.489013 1370 omaha_request_params.cc:62] Current group set to lts Oct 2 22:06:51.489152 update_engine[1370]: I1002 22:06:51.489118 1370 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 22:06:51.489152 update_engine[1370]: I1002 22:06:51.489123 1370 update_attempter.cc:638] Scheduling an action processor start. Oct 2 22:06:51.489152 update_engine[1370]: I1002 22:06:51.489137 1370 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 22:06:51.489252 update_engine[1370]: I1002 22:06:51.489158 1370 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 22:06:51.489524 locksmithd[1460]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 22:06:51.534552 update_engine[1370]: I1002 22:06:51.534507 1370 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 22:06:51.534552 update_engine[1370]: I1002 22:06:51.534535 1370 omaha_request_action.cc:269] Request: Oct 2 22:06:51.534552 update_engine[1370]: Oct 2 22:06:51.534552 update_engine[1370]: Oct 2 22:06:51.534552 update_engine[1370]: Oct 2 22:06:51.534552 update_engine[1370]: Oct 2 22:06:51.534552 update_engine[1370]: Oct 2 22:06:51.534552 update_engine[1370]: Oct 2 22:06:51.534552 update_engine[1370]: Oct 2 22:06:51.534552 update_engine[1370]: Oct 2 22:06:51.534552 update_engine[1370]: I1002 22:06:51.534541 1370 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 22:06:51.536152 update_engine[1370]: I1002 22:06:51.536131 1370 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 22:06:51.536328 update_engine[1370]: I1002 22:06:51.536309 1370 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 22:06:51.758213 kubelet[2531]: E1002 22:06:51.757718 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:52.681053 update_engine[1370]: I1002 22:06:52.681007 1370 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 22:06:52.681374 update_engine[1370]: I1002 22:06:52.681260 1370 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 22:06:52.681447 update_engine[1370]: I1002 22:06:52.681424 1370 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 22:06:53.042319 update_engine[1370]: I1002 22:06:53.041987 1370 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 22:06:53.043548 update_engine[1370]: I1002 22:06:53.043517 1370 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 22:06:53.043548 update_engine[1370]: I1002 22:06:53.043543 1370 omaha_request_action.cc:619] Omaha request response: Oct 2 22:06:53.043548 update_engine[1370]: Oct 2 22:06:53.304316 update_engine[1370]: I1002 22:06:53.304214 1370 omaha_request_action.cc:409] No update. Oct 2 22:06:53.304316 update_engine[1370]: I1002 22:06:53.304256 1370 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 22:06:53.304316 update_engine[1370]: I1002 22:06:53.304261 1370 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 22:06:53.304316 update_engine[1370]: I1002 22:06:53.304265 1370 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 22:06:53.304316 update_engine[1370]: I1002 22:06:53.304270 1370 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 22:06:53.304316 update_engine[1370]: I1002 22:06:53.304272 1370 update_attempter.cc:302] Processing Done. Oct 2 22:06:53.304316 update_engine[1370]: I1002 22:06:53.304286 1370 update_attempter.cc:338] No update. Oct 2 22:06:53.304316 update_engine[1370]: I1002 22:06:53.304296 1370 update_check_scheduler.cc:74] Next update check in 44m39s Oct 2 22:06:53.304595 locksmithd[1460]: LastCheckedTime=1696284413 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 22:06:55.782411 kubelet[2531]: E1002 22:06:55.782371 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:06:56.759368 kubelet[2531]: E1002 22:06:56.759333 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:58.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.19:22-10.200.12.6:51718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:58.108955 systemd[1]: Started sshd@15-10.200.20.19:22-10.200.12.6:51718.service. Oct 2 22:06:58.114342 kernel: kauditd_printk_skb: 37 callbacks suppressed Oct 2 22:06:58.114436 kernel: audit: type=1130 audit(1696284418.108:1223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.19:22-10.200.12.6:51718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:58.511000 audit[3288]: USER_ACCT pid=3288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:58.512088 sshd[3288]: Accepted publickey for core from 10.200.12.6 port 51718 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:06:58.514333 sshd[3288]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:06:58.513000 audit[3288]: CRED_ACQ pid=3288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:58.557637 kernel: audit: type=1101 audit(1696284418.511:1224): pid=3288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:58.557750 kernel: audit: type=1103 audit(1696284418.513:1225): pid=3288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:58.571474 kernel: audit: type=1006 audit(1696284418.513:1226): pid=3288 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 22:06:58.571591 kernel: audit: type=1300 audit(1696284418.513:1226): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4163770 a2=3 a3=1 items=0 ppid=1 pid=3288 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:58.513000 audit[3288]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4163770 a2=3 a3=1 items=0 ppid=1 pid=3288 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:58.513000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:58.598665 systemd[1]: Started session-18.scope. Oct 2 22:06:58.599971 systemd-logind[1367]: New session 18 of user core. Oct 2 22:06:58.603204 kernel: audit: type=1327 audit(1696284418.513:1226): proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:58.603000 audit[3288]: USER_START pid=3288 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:58.607000 audit[3290]: CRED_ACQ pid=3290 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:58.652149 kernel: audit: type=1105 audit(1696284418.603:1227): pid=3288 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:58.652233 kernel: audit: type=1103 audit(1696284418.607:1228): pid=3290 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:58.910975 sshd[3288]: pam_unix(sshd:session): session closed for user core Oct 2 22:06:58.911000 audit[3288]: USER_END pid=3288 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:58.914499 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 22:06:58.915239 systemd[1]: sshd@15-10.200.20.19:22-10.200.12.6:51718.service: Deactivated successfully. Oct 2 22:06:58.912000 audit[3288]: CRED_DISP pid=3288 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:58.959120 kernel: audit: type=1106 audit(1696284418.911:1229): pid=3288 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:58.959206 kernel: audit: type=1104 audit(1696284418.912:1230): pid=3288 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:58.959337 systemd-logind[1367]: Session 18 logged out. Waiting for processes to exit. Oct 2 22:06:58.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.19:22-10.200.12.6:51718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:58.960134 systemd-logind[1367]: Removed session 18. Oct 2 22:07:01.760599 kubelet[2531]: E1002 22:07:01.760564 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:06.761809 kubelet[2531]: E1002 22:07:06.761725 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:06.782592 kubelet[2531]: E1002 22:07:06.782562 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:07:08.984300 systemd[1]: Started sshd@16-10.200.20.19:22-10.200.12.6:49426.service. Oct 2 22:07:08.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.19:22-10.200.12.6:49426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:08.990378 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:07:08.990457 kernel: audit: type=1130 audit(1696284428.983:1232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.19:22-10.200.12.6:49426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:09.424000 audit[3302]: USER_ACCT pid=3302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:09.425239 sshd[3302]: Accepted publickey for core from 10.200.12.6 port 49426 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:07:09.427436 sshd[3302]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:07:09.432436 systemd[1]: Started session-19.scope. Oct 2 22:07:09.433972 systemd-logind[1367]: New session 19 of user core. Oct 2 22:07:09.426000 audit[3302]: CRED_ACQ pid=3302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:09.472349 kernel: audit: type=1101 audit(1696284429.424:1233): pid=3302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:09.472537 kernel: audit: type=1103 audit(1696284429.426:1234): pid=3302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:09.472573 kernel: audit: type=1006 audit(1696284429.426:1235): pid=3302 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 22:07:09.426000 audit[3302]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5410740 a2=3 a3=1 items=0 ppid=1 pid=3302 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:09.510505 kernel: audit: type=1300 audit(1696284429.426:1235): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5410740 a2=3 a3=1 items=0 ppid=1 pid=3302 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:09.510912 kernel: audit: type=1327 audit(1696284429.426:1235): proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:09.426000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:09.449000 audit[3302]: USER_START pid=3302 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:09.544002 kernel: audit: type=1105 audit(1696284429.449:1236): pid=3302 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:09.452000 audit[3304]: CRED_ACQ pid=3304 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:09.565726 kernel: audit: type=1103 audit(1696284429.452:1237): pid=3304 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:09.833077 sshd[3302]: pam_unix(sshd:session): session closed for user core Oct 2 22:07:09.833000 audit[3302]: USER_END pid=3302 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:09.836910 systemd-logind[1367]: Session 19 logged out. Waiting for processes to exit. Oct 2 22:07:09.838091 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 22:07:09.839316 systemd-logind[1367]: Removed session 19. Oct 2 22:07:09.839971 systemd[1]: sshd@16-10.200.20.19:22-10.200.12.6:49426.service: Deactivated successfully. Oct 2 22:07:09.833000 audit[3302]: CRED_DISP pid=3302 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:09.882153 kernel: audit: type=1106 audit(1696284429.833:1238): pid=3302 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:09.882250 kernel: audit: type=1104 audit(1696284429.833:1239): pid=3302 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:09.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.19:22-10.200.12.6:49426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:09.906600 systemd[1]: Started sshd@17-10.200.20.19:22-10.200.12.6:49438.service. Oct 2 22:07:09.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.19:22-10.200.12.6:49438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:10.345000 audit[3314]: USER_ACCT pid=3314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:10.346394 sshd[3314]: Accepted publickey for core from 10.200.12.6 port 49438 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:07:10.347000 audit[3314]: CRED_ACQ pid=3314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:10.347000 audit[3314]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc2cd6c0 a2=3 a3=1 items=0 ppid=1 pid=3314 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:10.347000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:10.348308 sshd[3314]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:07:10.352545 systemd[1]: Started session-20.scope. Oct 2 22:07:10.353280 systemd-logind[1367]: New session 20 of user core. Oct 2 22:07:10.356000 audit[3314]: USER_START pid=3314 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:10.359000 audit[3316]: CRED_ACQ pid=3316 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:11.401945 sshd[3314]: pam_unix(sshd:session): session closed for user core Oct 2 22:07:11.402000 audit[3314]: USER_END pid=3314 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:11.402000 audit[3314]: CRED_DISP pid=3314 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:11.404993 systemd[1]: sshd@17-10.200.20.19:22-10.200.12.6:49438.service: Deactivated successfully. Oct 2 22:07:11.405705 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 22:07:11.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.19:22-10.200.12.6:49438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:11.406255 systemd-logind[1367]: Session 20 logged out. Waiting for processes to exit. Oct 2 22:07:11.407013 systemd-logind[1367]: Removed session 20. Oct 2 22:07:11.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.19:22-10.200.12.6:49452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:11.475946 systemd[1]: Started sshd@18-10.200.20.19:22-10.200.12.6:49452.service. Oct 2 22:07:11.763208 kubelet[2531]: E1002 22:07:11.762688 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:11.913000 audit[3324]: USER_ACCT pid=3324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:11.914408 sshd[3324]: Accepted publickey for core from 10.200.12.6 port 49452 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:07:11.915000 audit[3324]: CRED_ACQ pid=3324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:11.915000 audit[3324]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9e96f80 a2=3 a3=1 items=0 ppid=1 pid=3324 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:11.915000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:11.916261 sshd[3324]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:07:11.920629 systemd[1]: Started session-21.scope. Oct 2 22:07:11.921127 systemd-logind[1367]: New session 21 of user core. Oct 2 22:07:11.924000 audit[3324]: USER_START pid=3324 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:11.927000 audit[3326]: CRED_ACQ pid=3326 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:12.295196 sshd[3324]: pam_unix(sshd:session): session closed for user core Oct 2 22:07:12.295000 audit[3324]: USER_END pid=3324 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:12.295000 audit[3324]: CRED_DISP pid=3324 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:12.298174 systemd-logind[1367]: Session 21 logged out. Waiting for processes to exit. Oct 2 22:07:12.298187 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 22:07:12.298790 systemd[1]: sshd@18-10.200.20.19:22-10.200.12.6:49452.service: Deactivated successfully. Oct 2 22:07:12.298000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.19:22-10.200.12.6:49452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:12.299808 systemd-logind[1367]: Removed session 21. Oct 2 22:07:16.763437 kubelet[2531]: E1002 22:07:16.763402 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:21.764792 kubelet[2531]: E1002 22:07:21.764749 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:21.782365 kubelet[2531]: E1002 22:07:21.782330 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:07:22.395372 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 22:07:22.395501 kernel: audit: type=1130 audit(1696284442.368:1259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.19:22-10.200.12.6:54882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:22.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.19:22-10.200.12.6:54882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:22.368918 systemd[1]: Started sshd@19-10.200.20.19:22-10.200.12.6:54882.service. Oct 2 22:07:22.808000 audit[3335]: USER_ACCT pid=3335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:22.809237 sshd[3335]: Accepted publickey for core from 10.200.12.6 port 54882 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:07:22.811486 sshd[3335]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:07:22.810000 audit[3335]: CRED_ACQ pid=3335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:22.855941 kernel: audit: type=1101 audit(1696284442.808:1260): pid=3335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:22.856088 kernel: audit: type=1103 audit(1696284442.810:1261): pid=3335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:22.870555 kernel: audit: type=1006 audit(1696284442.810:1262): pid=3335 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 22:07:22.870891 kernel: audit: type=1300 audit(1696284442.810:1262): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1afd380 a2=3 a3=1 items=0 ppid=1 pid=3335 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:22.810000 audit[3335]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1afd380 a2=3 a3=1 items=0 ppid=1 pid=3335 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:22.810000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:22.907062 kernel: audit: type=1327 audit(1696284442.810:1262): proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:22.909143 systemd-logind[1367]: New session 22 of user core. Oct 2 22:07:22.909564 systemd[1]: Started session-22.scope. Oct 2 22:07:22.912000 audit[3335]: USER_START pid=3335 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:22.939000 audit[3337]: CRED_ACQ pid=3337 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:22.962163 kernel: audit: type=1105 audit(1696284442.912:1263): pid=3335 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:22.962252 kernel: audit: type=1103 audit(1696284442.939:1264): pid=3337 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:23.263143 sshd[3335]: pam_unix(sshd:session): session closed for user core Oct 2 22:07:23.263000 audit[3335]: USER_END pid=3335 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:23.267241 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 22:07:23.268042 systemd[1]: sshd@19-10.200.20.19:22-10.200.12.6:54882.service: Deactivated successfully. Oct 2 22:07:23.263000 audit[3335]: CRED_DISP pid=3335 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:23.315902 kernel: audit: type=1106 audit(1696284443.263:1265): pid=3335 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:23.316044 kernel: audit: type=1104 audit(1696284443.263:1266): pid=3335 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:23.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.19:22-10.200.12.6:54882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:23.316197 systemd-logind[1367]: Session 22 logged out. Waiting for processes to exit. Oct 2 22:07:23.316902 systemd-logind[1367]: Removed session 22. Oct 2 22:07:26.766542 kubelet[2531]: E1002 22:07:26.766496 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:31.768089 kubelet[2531]: E1002 22:07:31.768064 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:33.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.19:22-10.200.12.6:34578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:33.332075 systemd[1]: Started sshd@20-10.200.20.19:22-10.200.12.6:34578.service. Oct 2 22:07:33.337398 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:07:33.337492 kernel: audit: type=1130 audit(1696284453.331:1268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.19:22-10.200.12.6:34578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:33.741000 audit[3346]: USER_ACCT pid=3346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:33.742359 sshd[3346]: Accepted publickey for core from 10.200.12.6 port 34578 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:07:33.744541 sshd[3346]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:07:33.743000 audit[3346]: CRED_ACQ pid=3346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:33.770152 systemd[1]: Started session-23.scope. Oct 2 22:07:33.771746 systemd-logind[1367]: New session 23 of user core. Oct 2 22:07:33.788049 kernel: audit: type=1101 audit(1696284453.741:1269): pid=3346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:33.788197 kernel: audit: type=1103 audit(1696284453.743:1270): pid=3346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:33.803257 kernel: audit: type=1006 audit(1696284453.743:1271): pid=3346 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 22:07:33.803391 kernel: audit: type=1300 audit(1696284453.743:1271): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd36ced10 a2=3 a3=1 items=0 ppid=1 pid=3346 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:33.743000 audit[3346]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd36ced10 a2=3 a3=1 items=0 ppid=1 pid=3346 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:33.743000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:33.834923 kernel: audit: type=1327 audit(1696284453.743:1271): proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:33.835001 kernel: audit: type=1105 audit(1696284453.788:1272): pid=3346 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:33.788000 audit[3346]: USER_START pid=3346 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:33.791000 audit[3348]: CRED_ACQ pid=3348 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:33.880691 kernel: audit: type=1103 audit(1696284453.791:1273): pid=3348 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:34.105675 sshd[3346]: pam_unix(sshd:session): session closed for user core Oct 2 22:07:34.105000 audit[3346]: USER_END pid=3346 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:34.109244 systemd-logind[1367]: Session 23 logged out. Waiting for processes to exit. Oct 2 22:07:34.110395 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 22:07:34.111942 systemd-logind[1367]: Removed session 23. Oct 2 22:07:34.112635 systemd[1]: sshd@20-10.200.20.19:22-10.200.12.6:34578.service: Deactivated successfully. Oct 2 22:07:34.105000 audit[3346]: CRED_DISP pid=3346 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:34.155877 kernel: audit: type=1106 audit(1696284454.105:1274): pid=3346 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:34.155986 kernel: audit: type=1104 audit(1696284454.105:1275): pid=3346 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:34.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.19:22-10.200.12.6:34578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:36.769060 kubelet[2531]: E1002 22:07:36.769037 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:36.782270 kubelet[2531]: E1002 22:07:36.782248 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:07:41.770179 kubelet[2531]: E1002 22:07:41.770156 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:44.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.19:22-10.200.12.6:32776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:44.173232 systemd[1]: Started sshd@21-10.200.20.19:22-10.200.12.6:32776.service. Oct 2 22:07:44.179777 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:07:44.179865 kernel: audit: type=1130 audit(1696284464.172:1277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.19:22-10.200.12.6:32776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:44.575000 audit[3359]: USER_ACCT pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:44.576448 sshd[3359]: Accepted publickey for core from 10.200.12.6 port 32776 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:07:44.578500 sshd[3359]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:07:44.577000 audit[3359]: CRED_ACQ pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:44.627968 kernel: audit: type=1101 audit(1696284464.575:1278): pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:44.628059 kernel: audit: type=1103 audit(1696284464.577:1279): pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:44.643240 kernel: audit: type=1006 audit(1696284464.577:1280): pid=3359 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 22:07:44.577000 audit[3359]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc06ea2f0 a2=3 a3=1 items=0 ppid=1 pid=3359 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:44.646497 systemd[1]: Started session-24.scope. Oct 2 22:07:44.668315 kernel: audit: type=1300 audit(1696284464.577:1280): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc06ea2f0 a2=3 a3=1 items=0 ppid=1 pid=3359 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:44.668365 systemd-logind[1367]: New session 24 of user core. Oct 2 22:07:44.577000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:44.677007 kernel: audit: type=1327 audit(1696284464.577:1280): proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:44.680000 audit[3359]: USER_START pid=3359 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:44.680000 audit[3361]: CRED_ACQ pid=3361 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:44.728929 kernel: audit: type=1105 audit(1696284464.680:1281): pid=3359 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:44.729030 kernel: audit: type=1103 audit(1696284464.680:1282): pid=3361 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:44.986551 sshd[3359]: pam_unix(sshd:session): session closed for user core Oct 2 22:07:44.990000 audit[3359]: USER_END pid=3359 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:44.993486 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 22:07:44.994487 systemd[1]: sshd@21-10.200.20.19:22-10.200.12.6:32776.service: Deactivated successfully. Oct 2 22:07:44.991000 audit[3359]: CRED_DISP pid=3359 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:45.039995 kernel: audit: type=1106 audit(1696284464.990:1283): pid=3359 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:45.040103 kernel: audit: type=1104 audit(1696284464.991:1284): pid=3359 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:45.040052 systemd-logind[1367]: Session 24 logged out. Waiting for processes to exit. Oct 2 22:07:44.993000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.19:22-10.200.12.6:32776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:45.040997 systemd-logind[1367]: Removed session 24. Oct 2 22:07:46.771700 kubelet[2531]: E1002 22:07:46.771667 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:47.783352 kubelet[2531]: E1002 22:07:47.783266 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:07:48.205000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:48.205000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40113e0660 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:07:48.205000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:07:48.205000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:48.205000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40112de9f0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:07:48.205000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:07:48.205000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:48.205000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=40112dea20 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:07:48.205000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:07:48.220000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:48.220000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4011333110 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:07:48.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:07:48.261000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:48.261000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001d5fca0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:07:48.261000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:48.262000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:48.262000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001b51ad0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:07:48.262000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:48.384000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:48.384000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:48.384000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4011333140 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:07:48.384000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:07:48.384000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40113e0760 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:07:48.384000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:07:50.975000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:50.981561 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 22:07:50.981635 kernel: audit: type=1400 audit(1696284470.975:1294): avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:50.975000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400101d980 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:07:51.037101 kernel: audit: type=1300 audit(1696284470.975:1294): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400101d980 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:07:50.975000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:51.065051 kernel: audit: type=1327 audit(1696284470.975:1294): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:51.065135 kernel: audit: type=1400 audit(1696284470.975:1295): avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:50.975000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:50.975000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400101dbc0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:07:51.118535 kernel: audit: type=1300 audit(1696284470.975:1295): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400101dbc0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:07:50.975000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:51.143498 kernel: audit: type=1327 audit(1696284470.975:1295): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:51.143631 kernel: audit: type=1400 audit(1696284470.983:1296): avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:50.983000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:50.983000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001d5ff80 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:07:51.196543 kernel: audit: type=1300 audit(1696284470.983:1296): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001d5ff80 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:07:50.983000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:51.221380 kernel: audit: type=1327 audit(1696284470.983:1296): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:50.983000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:51.245347 kernel: audit: type=1400 audit(1696284470.983:1297): avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:50.983000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400101dc00 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:07:50.983000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:51.685939 kubelet[2531]: W1002 22:07:51.685902 2531 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 22:07:51.773061 kubelet[2531]: E1002 22:07:51.773037 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:55.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.19:22-10.200.12.6:39972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:55.059917 systemd[1]: Started sshd@22-10.200.20.19:22-10.200.12.6:39972.service. Oct 2 22:07:55.496000 audit[3372]: USER_ACCT pid=3372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:55.498916 sshd[3372]: Accepted publickey for core from 10.200.12.6 port 39972 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:07:55.498000 audit[3372]: CRED_ACQ pid=3372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:55.498000 audit[3372]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0fd7830 a2=3 a3=1 items=0 ppid=1 pid=3372 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:55.498000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:55.500910 sshd[3372]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:07:55.504809 systemd-logind[1367]: New session 25 of user core. Oct 2 22:07:55.505713 systemd[1]: Started session-25.scope. Oct 2 22:07:55.508000 audit[3372]: USER_START pid=3372 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:55.511000 audit[3374]: CRED_ACQ pid=3374 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:55.882247 sshd[3372]: pam_unix(sshd:session): session closed for user core Oct 2 22:07:55.881000 audit[3372]: USER_END pid=3372 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:55.881000 audit[3372]: CRED_DISP pid=3372 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:55.885131 systemd-logind[1367]: Session 25 logged out. Waiting for processes to exit. Oct 2 22:07:55.885216 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 22:07:55.885996 systemd[1]: sshd@22-10.200.20.19:22-10.200.12.6:39972.service: Deactivated successfully. Oct 2 22:07:55.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.19:22-10.200.12.6:39972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:55.887019 systemd-logind[1367]: Removed session 25. Oct 2 22:07:56.774779 kubelet[2531]: E1002 22:07:56.774736 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:01.776498 kubelet[2531]: E1002 22:08:01.776462 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:02.781614 kubelet[2531]: E1002 22:08:02.781584 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:08:05.984979 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 22:08:05.985101 kernel: audit: type=1130 audit(1696284485.956:1307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.19:22-10.200.12.6:53078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:05.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.19:22-10.200.12.6:53078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:05.957455 systemd[1]: Started sshd@23-10.200.20.19:22-10.200.12.6:53078.service. Oct 2 22:08:06.402000 audit[3385]: USER_ACCT pid=3385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:06.403578 sshd[3385]: Accepted publickey for core from 10.200.12.6 port 53078 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:08:06.405794 sshd[3385]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:08:06.404000 audit[3385]: CRED_ACQ pid=3385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:06.449199 kernel: audit: type=1101 audit(1696284486.402:1308): pid=3385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:06.449369 kernel: audit: type=1103 audit(1696284486.404:1309): pid=3385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:06.463523 kernel: audit: type=1006 audit(1696284486.404:1310): pid=3385 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 22:08:06.404000 audit[3385]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe89a43a0 a2=3 a3=1 items=0 ppid=1 pid=3385 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:06.488272 kernel: audit: type=1300 audit(1696284486.404:1310): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe89a43a0 a2=3 a3=1 items=0 ppid=1 pid=3385 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:06.404000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:06.497567 kernel: audit: type=1327 audit(1696284486.404:1310): proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:06.500487 systemd[1]: Started session-26.scope. Oct 2 22:08:06.500973 systemd-logind[1367]: New session 26 of user core. Oct 2 22:08:06.504000 audit[3385]: USER_START pid=3385 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:06.504000 audit[3387]: CRED_ACQ pid=3387 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:06.531789 kernel: audit: type=1105 audit(1696284486.504:1311): pid=3385 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:06.553792 kernel: audit: type=1103 audit(1696284486.504:1312): pid=3387 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:06.778183 kubelet[2531]: E1002 22:08:06.778085 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:06.826064 sshd[3385]: pam_unix(sshd:session): session closed for user core Oct 2 22:08:06.826000 audit[3385]: USER_END pid=3385 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:06.830186 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 22:08:06.831168 systemd[1]: sshd@23-10.200.20.19:22-10.200.12.6:53078.service: Deactivated successfully. Oct 2 22:08:06.827000 audit[3385]: CRED_DISP pid=3385 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:06.874076 kernel: audit: type=1106 audit(1696284486.826:1313): pid=3385 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:06.874194 kernel: audit: type=1104 audit(1696284486.827:1314): pid=3385 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:06.874211 systemd-logind[1367]: Session 26 logged out. Waiting for processes to exit. Oct 2 22:08:06.830000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.19:22-10.200.12.6:53078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:06.875082 systemd-logind[1367]: Removed session 26. Oct 2 22:08:11.779458 kubelet[2531]: E1002 22:08:11.779433 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:13.782272 kubelet[2531]: E1002 22:08:13.782242 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:08:16.781291 kubelet[2531]: E1002 22:08:16.781256 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:16.905600 systemd[1]: Started sshd@24-10.200.20.19:22-10.200.12.6:44906.service. Oct 2 22:08:16.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.19:22-10.200.12.6:44906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:16.911637 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:08:16.911719 kernel: audit: type=1130 audit(1696284496.905:1316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.19:22-10.200.12.6:44906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:17.351000 audit[3396]: USER_ACCT pid=3396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:17.352933 sshd[3396]: Accepted publickey for core from 10.200.12.6 port 44906 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:08:17.377895 kernel: audit: type=1101 audit(1696284497.351:1317): pid=3396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:17.378000 audit[3396]: CRED_ACQ pid=3396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:17.379824 sshd[3396]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:08:17.416684 kernel: audit: type=1103 audit(1696284497.378:1318): pid=3396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:17.416779 kernel: audit: type=1006 audit(1696284497.378:1319): pid=3396 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 22:08:17.378000 audit[3396]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7dd5d30 a2=3 a3=1 items=0 ppid=1 pid=3396 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:17.442015 kernel: audit: type=1300 audit(1696284497.378:1319): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7dd5d30 a2=3 a3=1 items=0 ppid=1 pid=3396 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:17.421034 systemd[1]: Started session-27.scope. Oct 2 22:08:17.442031 systemd-logind[1367]: New session 27 of user core. Oct 2 22:08:17.378000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:17.450560 kernel: audit: type=1327 audit(1696284497.378:1319): proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:17.453000 audit[3396]: USER_START pid=3396 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:17.457000 audit[3398]: CRED_ACQ pid=3398 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:17.502310 kernel: audit: type=1105 audit(1696284497.453:1320): pid=3396 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:17.502386 kernel: audit: type=1103 audit(1696284497.457:1321): pid=3398 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:17.778000 audit[3396]: USER_END pid=3396 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:17.777976 sshd[3396]: pam_unix(sshd:session): session closed for user core Oct 2 22:08:17.782898 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 22:08:17.783665 systemd[1]: sshd@24-10.200.20.19:22-10.200.12.6:44906.service: Deactivated successfully. Oct 2 22:08:17.779000 audit[3396]: CRED_DISP pid=3396 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:17.825900 kernel: audit: type=1106 audit(1696284497.778:1322): pid=3396 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:17.826010 kernel: audit: type=1104 audit(1696284497.779:1323): pid=3396 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:17.826136 systemd-logind[1367]: Session 27 logged out. Waiting for processes to exit. Oct 2 22:08:17.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.19:22-10.200.12.6:44906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:17.827029 systemd-logind[1367]: Removed session 27. Oct 2 22:08:21.782367 kubelet[2531]: E1002 22:08:21.782343 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:26.784751 kubelet[2531]: E1002 22:08:26.784699 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:27.852880 systemd[1]: Started sshd@25-10.200.20.19:22-10.200.12.6:35998.service. Oct 2 22:08:27.879890 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:08:27.879939 kernel: audit: type=1130 audit(1696284507.852:1325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.19:22-10.200.12.6:35998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:27.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.19:22-10.200.12.6:35998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:28.296000 audit[3409]: USER_ACCT pid=3409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:28.298272 sshd[3409]: Accepted publickey for core from 10.200.12.6 port 35998 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:08:28.300391 sshd[3409]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:08:28.305956 systemd[1]: Started session-28.scope. Oct 2 22:08:28.307277 systemd-logind[1367]: New session 28 of user core. Oct 2 22:08:28.299000 audit[3409]: CRED_ACQ pid=3409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:28.345194 kernel: audit: type=1101 audit(1696284508.296:1326): pid=3409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:28.345285 kernel: audit: type=1103 audit(1696284508.299:1327): pid=3409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:28.359206 kernel: audit: type=1006 audit(1696284508.299:1328): pid=3409 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 22:08:28.299000 audit[3409]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc099480 a2=3 a3=1 items=0 ppid=1 pid=3409 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:28.383134 kernel: audit: type=1300 audit(1696284508.299:1328): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc099480 a2=3 a3=1 items=0 ppid=1 pid=3409 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:28.299000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:28.395051 kernel: audit: type=1327 audit(1696284508.299:1328): proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:28.395150 kernel: audit: type=1105 audit(1696284508.310:1329): pid=3409 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:28.310000 audit[3409]: USER_START pid=3409 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:28.313000 audit[3411]: CRED_ACQ pid=3411 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:28.438572 kernel: audit: type=1103 audit(1696284508.313:1330): pid=3411 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:28.703717 sshd[3409]: pam_unix(sshd:session): session closed for user core Oct 2 22:08:28.704000 audit[3409]: USER_END pid=3409 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:28.707241 systemd-logind[1367]: Session 28 logged out. Waiting for processes to exit. Oct 2 22:08:28.708435 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 22:08:28.709710 systemd-logind[1367]: Removed session 28. Oct 2 22:08:28.710387 systemd[1]: sshd@25-10.200.20.19:22-10.200.12.6:35998.service: Deactivated successfully. Oct 2 22:08:28.704000 audit[3409]: CRED_DISP pid=3409 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:28.751638 kernel: audit: type=1106 audit(1696284508.704:1331): pid=3409 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:28.751754 kernel: audit: type=1104 audit(1696284508.704:1332): pid=3409 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:28.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.19:22-10.200.12.6:35998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:28.781694 kubelet[2531]: E1002 22:08:28.781664 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:08:31.785396 kubelet[2531]: E1002 22:08:31.785301 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:36.786939 kubelet[2531]: E1002 22:08:36.786788 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:38.773911 systemd[1]: Started sshd@26-10.200.20.19:22-10.200.12.6:47452.service. Oct 2 22:08:38.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.19:22-10.200.12.6:47452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:38.780007 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:08:38.780109 kernel: audit: type=1130 audit(1696284518.773:1334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.19:22-10.200.12.6:47452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:39.182000 audit[3424]: USER_ACCT pid=3424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:39.183648 sshd[3424]: Accepted publickey for core from 10.200.12.6 port 47452 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:08:39.208852 kernel: audit: type=1101 audit(1696284519.182:1335): pid=3424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:39.208946 kernel: audit: type=1103 audit(1696284519.207:1336): pid=3424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:39.207000 audit[3424]: CRED_ACQ pid=3424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:39.209453 sshd[3424]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:08:39.234557 systemd[1]: Started session-29.scope. Oct 2 22:08:39.235832 systemd-logind[1367]: New session 29 of user core. Oct 2 22:08:39.244745 kernel: audit: type=1006 audit(1696284519.208:1337): pid=3424 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 22:08:39.208000 audit[3424]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff80c13e0 a2=3 a3=1 items=0 ppid=1 pid=3424 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:39.268322 kernel: audit: type=1300 audit(1696284519.208:1337): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff80c13e0 a2=3 a3=1 items=0 ppid=1 pid=3424 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:39.208000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:39.276840 kernel: audit: type=1327 audit(1696284519.208:1337): proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:39.239000 audit[3424]: USER_START pid=3424 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:39.302785 kernel: audit: type=1105 audit(1696284519.239:1338): pid=3424 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:39.242000 audit[3426]: CRED_ACQ pid=3426 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:39.324082 kernel: audit: type=1103 audit(1696284519.242:1339): pid=3426 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:39.566459 sshd[3424]: pam_unix(sshd:session): session closed for user core Oct 2 22:08:39.566000 audit[3424]: USER_END pid=3424 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:39.570215 systemd-logind[1367]: Session 29 logged out. Waiting for processes to exit. Oct 2 22:08:39.571310 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 22:08:39.572400 systemd-logind[1367]: Removed session 29. Oct 2 22:08:39.572940 systemd[1]: sshd@26-10.200.20.19:22-10.200.12.6:47452.service: Deactivated successfully. Oct 2 22:08:39.566000 audit[3424]: CRED_DISP pid=3424 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:39.615438 kernel: audit: type=1106 audit(1696284519.566:1340): pid=3424 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:39.615630 kernel: audit: type=1104 audit(1696284519.566:1341): pid=3424 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:39.572000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.19:22-10.200.12.6:47452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:40.781713 kubelet[2531]: E1002 22:08:40.781683 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-k5t6b_kube-system(78dfb957-827a-4569-93f2-9f09a6bc01b5)\"" pod="kube-system/cilium-k5t6b" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 Oct 2 22:08:41.787698 kubelet[2531]: E1002 22:08:41.787674 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:46.789246 kubelet[2531]: E1002 22:08:46.789215 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:48.206000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:48.212771 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:08:48.212867 kernel: audit: type=1400 audit(1696284528.206:1344): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:48.206000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:48.258517 kernel: audit: type=1400 audit(1696284528.206:1343): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:48.206000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4003f31600 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:08:48.287351 kernel: audit: type=1300 audit(1696284528.206:1344): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4003f31600 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:08:48.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:48.312837 kernel: audit: type=1327 audit(1696284528.206:1344): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:48.206000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:48.335926 kernel: audit: type=1400 audit(1696284528.206:1345): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:48.206000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4008a7ede0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:08:48.363665 kernel: audit: type=1300 audit(1696284528.206:1345): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4008a7ede0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:08:48.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:48.206000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4008405f80 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:08:48.388873 kernel: audit: type=1327 audit(1696284528.206:1345): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:48.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:48.441669 kernel: audit: type=1300 audit(1696284528.206:1343): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4008405f80 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:08:48.441772 kernel: audit: type=1327 audit(1696284528.206:1343): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:48.220000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:48.464979 kernel: audit: type=1400 audit(1696284528.220:1346): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:48.220000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4008a7ee70 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:08:48.220000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:48.286000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:48.286000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001225d20 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:08:48.286000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:08:48.286000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:48.286000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002006de0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:08:48.286000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:08:48.385000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:48.385000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4003f09dc0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:08:48.385000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:48.385000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:48.385000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=4008a7eea0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:08:48.385000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:49.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.19:22-10.200.12.6:45454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:49.633752 systemd[1]: Started sshd@27-10.200.20.19:22-10.200.12.6:45454.service. Oct 2 22:08:50.033000 audit[3435]: USER_ACCT pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:50.035447 sshd[3435]: Accepted publickey for core from 10.200.12.6 port 45454 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:08:50.035000 audit[3435]: CRED_ACQ pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:50.035000 audit[3435]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6867b40 a2=3 a3=1 items=0 ppid=1 pid=3435 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:50.035000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:50.037475 sshd[3435]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:08:50.041864 systemd[1]: Started session-30.scope. Oct 2 22:08:50.042276 systemd-logind[1367]: New session 30 of user core. Oct 2 22:08:50.044000 audit[3435]: USER_START pid=3435 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:50.047000 audit[3437]: CRED_ACQ pid=3437 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:50.397412 sshd[3435]: pam_unix(sshd:session): session closed for user core Oct 2 22:08:50.398000 audit[3435]: USER_END pid=3435 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:50.398000 audit[3435]: CRED_DISP pid=3435 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:50.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.19:22-10.200.12.6:45454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:50.402150 systemd[1]: sshd@27-10.200.20.19:22-10.200.12.6:45454.service: Deactivated successfully. Oct 2 22:08:50.402905 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 22:08:50.403471 systemd-logind[1367]: Session 30 logged out. Waiting for processes to exit. Oct 2 22:08:50.404358 systemd-logind[1367]: Removed session 30. Oct 2 22:08:50.464068 systemd[1]: Started sshd@28-10.200.20.19:22-10.200.12.6:45464.service. Oct 2 22:08:50.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.19:22-10.200.12.6:45464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:50.867000 audit[3446]: USER_ACCT pid=3446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:50.868031 sshd[3446]: Accepted publickey for core from 10.200.12.6 port 45464 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:08:50.868000 audit[3446]: CRED_ACQ pid=3446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:50.868000 audit[3446]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9cb9780 a2=3 a3=1 items=0 ppid=1 pid=3446 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:50.868000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:50.869884 sshd[3446]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:08:50.874313 systemd[1]: Started session-31.scope. Oct 2 22:08:50.875680 systemd-logind[1367]: New session 31 of user core. Oct 2 22:08:50.879000 audit[3446]: USER_START pid=3446 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:50.881000 audit[3448]: CRED_ACQ pid=3448 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:50.977000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:50.977000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001225f20 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:08:50.977000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:08:50.977000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:50.977000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001f4c760 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:08:50.977000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:08:50.985000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:50.985000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:50.985000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001f4c9a0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:08:50.985000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:08:50.985000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001225f40 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:08:50.985000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:08:51.789946 kubelet[2531]: E1002 22:08:51.789924 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:53.281718 env[1377]: time="2023-10-02T22:08:53.281668094Z" level=info msg="StopPodSandbox for \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\"" Oct 2 22:08:53.282330 env[1377]: time="2023-10-02T22:08:53.282130478Z" level=info msg="Container to stop \"f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 22:08:53.284964 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb-shm.mount: Deactivated successfully. Oct 2 22:08:53.292490 env[1377]: time="2023-10-02T22:08:53.292446497Z" level=info msg="StopContainer for \"271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7\" with timeout 30 (s)" Oct 2 22:08:53.293064 env[1377]: time="2023-10-02T22:08:53.293042317Z" level=info msg="Stop container \"271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7\" with signal terminated" Oct 2 22:08:53.296991 systemd[1]: cri-containerd-4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb.scope: Deactivated successfully. Oct 2 22:08:53.296000 audit: BPF prog-id=113 op=UNLOAD Oct 2 22:08:53.303260 kernel: kauditd_printk_skb: 45 callbacks suppressed Oct 2 22:08:53.303354 kernel: audit: type=1334 audit(1696284533.296:1370): prog-id=113 op=UNLOAD Oct 2 22:08:53.311000 audit: BPF prog-id=116 op=UNLOAD Oct 2 22:08:53.322857 kernel: audit: type=1334 audit(1696284533.311:1371): prog-id=116 op=UNLOAD Oct 2 22:08:53.345974 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb-rootfs.mount: Deactivated successfully. Oct 2 22:08:53.346468 systemd[1]: cri-containerd-271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7.scope: Deactivated successfully. Oct 2 22:08:53.345000 audit: BPF prog-id=128 op=UNLOAD Oct 2 22:08:53.354842 kernel: audit: type=1334 audit(1696284533.345:1372): prog-id=128 op=UNLOAD Oct 2 22:08:53.355000 audit: BPF prog-id=131 op=UNLOAD Oct 2 22:08:53.365788 kernel: audit: type=1334 audit(1696284533.355:1373): prog-id=131 op=UNLOAD Oct 2 22:08:53.387729 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7-rootfs.mount: Deactivated successfully. Oct 2 22:08:53.466146 env[1377]: time="2023-10-02T22:08:53.466095343Z" level=info msg="shim disconnected" id=4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb Oct 2 22:08:53.466146 env[1377]: time="2023-10-02T22:08:53.466145302Z" level=warning msg="cleaning up after shim disconnected" id=4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb namespace=k8s.io Oct 2 22:08:53.466368 env[1377]: time="2023-10-02T22:08:53.466155701Z" level=info msg="cleaning up dead shim" Oct 2 22:08:53.466368 env[1377]: time="2023-10-02T22:08:53.466308656Z" level=info msg="shim disconnected" id=271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7 Oct 2 22:08:53.466368 env[1377]: time="2023-10-02T22:08:53.466332575Z" level=warning msg="cleaning up after shim disconnected" id=271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7 namespace=k8s.io Oct 2 22:08:53.466368 env[1377]: time="2023-10-02T22:08:53.466339935Z" level=info msg="cleaning up dead shim" Oct 2 22:08:53.481669 env[1377]: time="2023-10-02T22:08:53.481616909Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:08:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3494 runtime=io.containerd.runc.v2\n" Oct 2 22:08:53.481954 env[1377]: time="2023-10-02T22:08:53.481924859Z" level=info msg="TearDown network for sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" successfully" Oct 2 22:08:53.481954 env[1377]: time="2023-10-02T22:08:53.481950418Z" level=info msg="StopPodSandbox for \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" returns successfully" Oct 2 22:08:53.485402 env[1377]: time="2023-10-02T22:08:53.485307947Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:08:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3495 runtime=io.containerd.runc.v2\n" Oct 2 22:08:53.489790 env[1377]: time="2023-10-02T22:08:53.489744480Z" level=info msg="StopContainer for \"271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7\" returns successfully" Oct 2 22:08:53.490107 env[1377]: time="2023-10-02T22:08:53.490085588Z" level=info msg="StopPodSandbox for \"60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48\"" Oct 2 22:08:53.490218 env[1377]: time="2023-10-02T22:08:53.490199785Z" level=info msg="Container to stop \"271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 22:08:53.492718 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48-shm.mount: Deactivated successfully. Oct 2 22:08:53.501048 systemd[1]: cri-containerd-60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48.scope: Deactivated successfully. Oct 2 22:08:53.500000 audit: BPF prog-id=117 op=UNLOAD Oct 2 22:08:53.508785 kernel: audit: type=1334 audit(1696284533.500:1374): prog-id=117 op=UNLOAD Oct 2 22:08:53.510000 audit: BPF prog-id=120 op=UNLOAD Oct 2 22:08:53.517558 kubelet[2531]: I1002 22:08:53.517529 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/78dfb957-827a-4569-93f2-9f09a6bc01b5-clustermesh-secrets\") pod \"78dfb957-827a-4569-93f2-9f09a6bc01b5\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " Oct 2 22:08:53.517831 kubelet[2531]: I1002 22:08:53.517566 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-etc-cni-netd\") pod \"78dfb957-827a-4569-93f2-9f09a6bc01b5\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " Oct 2 22:08:53.517831 kubelet[2531]: I1002 22:08:53.517613 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-cni-path\") pod \"78dfb957-827a-4569-93f2-9f09a6bc01b5\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " Oct 2 22:08:53.517831 kubelet[2531]: I1002 22:08:53.517630 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-hostproc\") pod \"78dfb957-827a-4569-93f2-9f09a6bc01b5\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " Oct 2 22:08:53.517831 kubelet[2531]: I1002 22:08:53.517652 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/78dfb957-827a-4569-93f2-9f09a6bc01b5-cilium-config-path\") pod \"78dfb957-827a-4569-93f2-9f09a6bc01b5\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " Oct 2 22:08:53.517831 kubelet[2531]: I1002 22:08:53.517672 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-xtables-lock\") pod \"78dfb957-827a-4569-93f2-9f09a6bc01b5\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " Oct 2 22:08:53.517831 kubelet[2531]: I1002 22:08:53.517692 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-xz46n\" (UniqueName: \"kubernetes.io/projected/78dfb957-827a-4569-93f2-9f09a6bc01b5-kube-api-access-xz46n\") pod \"78dfb957-827a-4569-93f2-9f09a6bc01b5\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " Oct 2 22:08:53.517991 kubelet[2531]: I1002 22:08:53.517711 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/78dfb957-827a-4569-93f2-9f09a6bc01b5-hubble-tls\") pod \"78dfb957-827a-4569-93f2-9f09a6bc01b5\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " Oct 2 22:08:53.517991 kubelet[2531]: I1002 22:08:53.517727 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-bpf-maps\") pod \"78dfb957-827a-4569-93f2-9f09a6bc01b5\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " Oct 2 22:08:53.517991 kubelet[2531]: I1002 22:08:53.517744 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-host-proc-sys-kernel\") pod \"78dfb957-827a-4569-93f2-9f09a6bc01b5\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " Oct 2 22:08:53.517991 kubelet[2531]: I1002 22:08:53.517775 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-cilium-run\") pod \"78dfb957-827a-4569-93f2-9f09a6bc01b5\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " Oct 2 22:08:53.517991 kubelet[2531]: I1002 22:08:53.517795 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-lib-modules\") pod \"78dfb957-827a-4569-93f2-9f09a6bc01b5\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " Oct 2 22:08:53.517991 kubelet[2531]: I1002 22:08:53.517812 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-cilium-cgroup\") pod \"78dfb957-827a-4569-93f2-9f09a6bc01b5\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " Oct 2 22:08:53.518141 kubelet[2531]: I1002 22:08:53.517829 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-host-proc-sys-net\") pod \"78dfb957-827a-4569-93f2-9f09a6bc01b5\" (UID: \"78dfb957-827a-4569-93f2-9f09a6bc01b5\") " Oct 2 22:08:53.518141 kubelet[2531]: I1002 22:08:53.517881 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "78dfb957-827a-4569-93f2-9f09a6bc01b5" (UID: "78dfb957-827a-4569-93f2-9f09a6bc01b5"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:08:53.518788 kernel: audit: type=1334 audit(1696284533.510:1375): prog-id=120 op=UNLOAD Oct 2 22:08:53.518859 kubelet[2531]: I1002 22:08:53.518406 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "78dfb957-827a-4569-93f2-9f09a6bc01b5" (UID: "78dfb957-827a-4569-93f2-9f09a6bc01b5"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:08:53.518859 kubelet[2531]: I1002 22:08:53.518448 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-cni-path" (OuterVolumeSpecName: "cni-path") pod "78dfb957-827a-4569-93f2-9f09a6bc01b5" (UID: "78dfb957-827a-4569-93f2-9f09a6bc01b5"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:08:53.518859 kubelet[2531]: I1002 22:08:53.518464 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-hostproc" (OuterVolumeSpecName: "hostproc") pod "78dfb957-827a-4569-93f2-9f09a6bc01b5" (UID: "78dfb957-827a-4569-93f2-9f09a6bc01b5"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:08:53.518859 kubelet[2531]: W1002 22:08:53.518568 2531 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/78dfb957-827a-4569-93f2-9f09a6bc01b5/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 22:08:53.520798 kubelet[2531]: I1002 22:08:53.520594 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/78dfb957-827a-4569-93f2-9f09a6bc01b5-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "78dfb957-827a-4569-93f2-9f09a6bc01b5" (UID: "78dfb957-827a-4569-93f2-9f09a6bc01b5"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 22:08:53.520798 kubelet[2531]: I1002 22:08:53.520661 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "78dfb957-827a-4569-93f2-9f09a6bc01b5" (UID: "78dfb957-827a-4569-93f2-9f09a6bc01b5"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:08:53.520798 kubelet[2531]: I1002 22:08:53.520712 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "78dfb957-827a-4569-93f2-9f09a6bc01b5" (UID: "78dfb957-827a-4569-93f2-9f09a6bc01b5"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:08:53.521815 kubelet[2531]: I1002 22:08:53.521066 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "78dfb957-827a-4569-93f2-9f09a6bc01b5" (UID: "78dfb957-827a-4569-93f2-9f09a6bc01b5"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:08:53.521815 kubelet[2531]: I1002 22:08:53.521097 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "78dfb957-827a-4569-93f2-9f09a6bc01b5" (UID: "78dfb957-827a-4569-93f2-9f09a6bc01b5"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:08:53.521815 kubelet[2531]: I1002 22:08:53.521112 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "78dfb957-827a-4569-93f2-9f09a6bc01b5" (UID: "78dfb957-827a-4569-93f2-9f09a6bc01b5"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:08:53.521815 kubelet[2531]: I1002 22:08:53.521169 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "78dfb957-827a-4569-93f2-9f09a6bc01b5" (UID: "78dfb957-827a-4569-93f2-9f09a6bc01b5"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:08:53.526073 systemd[1]: var-lib-kubelet-pods-78dfb957\x2d827a\x2d4569\x2d93f2\x2d9f09a6bc01b5-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 22:08:53.527735 kubelet[2531]: I1002 22:08:53.527699 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/78dfb957-827a-4569-93f2-9f09a6bc01b5-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "78dfb957-827a-4569-93f2-9f09a6bc01b5" (UID: "78dfb957-827a-4569-93f2-9f09a6bc01b5"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 22:08:53.532724 kubelet[2531]: I1002 22:08:53.532649 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/78dfb957-827a-4569-93f2-9f09a6bc01b5-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "78dfb957-827a-4569-93f2-9f09a6bc01b5" (UID: "78dfb957-827a-4569-93f2-9f09a6bc01b5"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 22:08:53.534565 kubelet[2531]: I1002 22:08:53.534537 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/78dfb957-827a-4569-93f2-9f09a6bc01b5-kube-api-access-xz46n" (OuterVolumeSpecName: "kube-api-access-xz46n") pod "78dfb957-827a-4569-93f2-9f09a6bc01b5" (UID: "78dfb957-827a-4569-93f2-9f09a6bc01b5"). InnerVolumeSpecName "kube-api-access-xz46n". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 22:08:53.572568 env[1377]: time="2023-10-02T22:08:53.572523537Z" level=info msg="shim disconnected" id=60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48 Oct 2 22:08:53.572780 env[1377]: time="2023-10-02T22:08:53.572749290Z" level=warning msg="cleaning up after shim disconnected" id=60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48 namespace=k8s.io Oct 2 22:08:53.572856 env[1377]: time="2023-10-02T22:08:53.572843726Z" level=info msg="cleaning up dead shim" Oct 2 22:08:53.584890 env[1377]: time="2023-10-02T22:08:53.584854808Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:08:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3540 runtime=io.containerd.runc.v2\n" Oct 2 22:08:53.585279 env[1377]: time="2023-10-02T22:08:53.585255835Z" level=info msg="TearDown network for sandbox \"60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48\" successfully" Oct 2 22:08:53.585359 env[1377]: time="2023-10-02T22:08:53.585343632Z" level=info msg="StopPodSandbox for \"60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48\" returns successfully" Oct 2 22:08:53.618816 kubelet[2531]: I1002 22:08:53.618787 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c-cilium-config-path\") pod \"525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c\" (UID: \"525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c\") " Oct 2 22:08:53.618961 kubelet[2531]: I1002 22:08:53.618832 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-l9clt\" (UniqueName: \"kubernetes.io/projected/525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c-kube-api-access-l9clt\") pod \"525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c\" (UID: \"525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c\") " Oct 2 22:08:53.618961 kubelet[2531]: I1002 22:08:53.618862 2531 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-xz46n\" (UniqueName: \"kubernetes.io/projected/78dfb957-827a-4569-93f2-9f09a6bc01b5-kube-api-access-xz46n\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.618961 kubelet[2531]: I1002 22:08:53.618873 2531 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/78dfb957-827a-4569-93f2-9f09a6bc01b5-hubble-tls\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.618961 kubelet[2531]: I1002 22:08:53.618884 2531 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-bpf-maps\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.618961 kubelet[2531]: I1002 22:08:53.618894 2531 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.618961 kubelet[2531]: I1002 22:08:53.618903 2531 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-cilium-run\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.618961 kubelet[2531]: I1002 22:08:53.618912 2531 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-lib-modules\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.619950 kubelet[2531]: I1002 22:08:53.618921 2531 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-cilium-cgroup\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.619950 kubelet[2531]: I1002 22:08:53.618931 2531 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-host-proc-sys-net\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.619950 kubelet[2531]: I1002 22:08:53.618943 2531 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/78dfb957-827a-4569-93f2-9f09a6bc01b5-clustermesh-secrets\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.619950 kubelet[2531]: I1002 22:08:53.618952 2531 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-etc-cni-netd\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.619950 kubelet[2531]: I1002 22:08:53.618963 2531 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-cni-path\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.619950 kubelet[2531]: I1002 22:08:53.618972 2531 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-hostproc\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.619950 kubelet[2531]: I1002 22:08:53.618982 2531 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/78dfb957-827a-4569-93f2-9f09a6bc01b5-cilium-config-path\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.619950 kubelet[2531]: I1002 22:08:53.618991 2531 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/78dfb957-827a-4569-93f2-9f09a6bc01b5-xtables-lock\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.620130 kubelet[2531]: W1002 22:08:53.619190 2531 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 22:08:53.621292 kubelet[2531]: I1002 22:08:53.621249 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c" (UID: "525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 22:08:53.623589 kubelet[2531]: I1002 22:08:53.623560 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c-kube-api-access-l9clt" (OuterVolumeSpecName: "kube-api-access-l9clt") pod "525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c" (UID: "525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c"). InnerVolumeSpecName "kube-api-access-l9clt". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 22:08:53.719884 kubelet[2531]: I1002 22:08:53.719847 2531 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-l9clt\" (UniqueName: \"kubernetes.io/projected/525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c-kube-api-access-l9clt\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.719884 kubelet[2531]: I1002 22:08:53.719883 2531 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c-cilium-config-path\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:08:53.787166 systemd[1]: Removed slice kubepods-burstable-pod78dfb957_827a_4569_93f2_9f09a6bc01b5.slice. Oct 2 22:08:53.790138 systemd[1]: Removed slice kubepods-besteffort-pod525a8bc4_4aa3_47e9_a85e_c9cc0ffb1b9c.slice. Oct 2 22:08:54.284907 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48-rootfs.mount: Deactivated successfully. Oct 2 22:08:54.284999 systemd[1]: var-lib-kubelet-pods-525a8bc4\x2d4aa3\x2d47e9\x2da85e\x2dc9cc0ffb1b9c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dl9clt.mount: Deactivated successfully. Oct 2 22:08:54.285056 systemd[1]: var-lib-kubelet-pods-78dfb957\x2d827a\x2d4569\x2d93f2\x2d9f09a6bc01b5-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dxz46n.mount: Deactivated successfully. Oct 2 22:08:54.285106 systemd[1]: var-lib-kubelet-pods-78dfb957\x2d827a\x2d4569\x2d93f2\x2d9f09a6bc01b5-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 22:08:54.478200 kubelet[2531]: I1002 22:08:54.478174 2531 scope.go:115] "RemoveContainer" containerID="271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7" Oct 2 22:08:54.480651 env[1377]: time="2023-10-02T22:08:54.480391108Z" level=info msg="RemoveContainer for \"271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7\"" Oct 2 22:08:54.488071 env[1377]: time="2023-10-02T22:08:54.487979817Z" level=info msg="RemoveContainer for \"271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7\" returns successfully" Oct 2 22:08:54.488185 kubelet[2531]: I1002 22:08:54.488161 2531 scope.go:115] "RemoveContainer" containerID="271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7" Oct 2 22:08:54.488417 env[1377]: time="2023-10-02T22:08:54.488334086Z" level=error msg="ContainerStatus for \"271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7\": not found" Oct 2 22:08:54.488551 kubelet[2531]: E1002 22:08:54.488525 2531 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7\": not found" containerID="271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7" Oct 2 22:08:54.488606 kubelet[2531]: I1002 22:08:54.488563 2531 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7} err="failed to get container status \"271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7\": rpc error: code = NotFound desc = an error occurred when try to find container \"271b257cf89ef8edfff45ea0857c78a8d14d13418c53c4fe55dd2fc7547b24c7\": not found" Oct 2 22:08:54.488606 kubelet[2531]: I1002 22:08:54.488574 2531 scope.go:115] "RemoveContainer" containerID="f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5" Oct 2 22:08:54.489439 env[1377]: time="2023-10-02T22:08:54.489403810Z" level=info msg="RemoveContainer for \"f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5\"" Oct 2 22:08:54.499584 env[1377]: time="2023-10-02T22:08:54.499532956Z" level=info msg="RemoveContainer for \"f80b45f1a2f2e5dd95e4253a1fde7ba2a124d053c08f3ac4a7826ac372b40ce5\" returns successfully" Oct 2 22:08:55.303104 sshd[3446]: pam_unix(sshd:session): session closed for user core Oct 2 22:08:55.303000 audit[3446]: USER_END pid=3446 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:55.306304 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 22:08:55.306490 systemd[1]: session-31.scope: Consumed 1.556s CPU time. Oct 2 22:08:55.306874 systemd[1]: sshd@28-10.200.20.19:22-10.200.12.6:45464.service: Deactivated successfully. Oct 2 22:08:55.308179 systemd-logind[1367]: Session 31 logged out. Waiting for processes to exit. Oct 2 22:08:55.308881 systemd-logind[1367]: Removed session 31. Oct 2 22:08:55.303000 audit[3446]: CRED_DISP pid=3446 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:55.350975 kernel: audit: type=1106 audit(1696284535.303:1376): pid=3446 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:55.351052 kernel: audit: type=1104 audit(1696284535.303:1377): pid=3446 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:55.351084 kernel: audit: type=1131 audit(1696284535.303:1378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.19:22-10.200.12.6:45464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:55.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.19:22-10.200.12.6:45464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:55.376817 systemd[1]: Started sshd@29-10.200.20.19:22-10.200.12.6:45480.service. Oct 2 22:08:55.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.19:22-10.200.12.6:45480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:55.407786 kernel: audit: type=1130 audit(1696284535.376:1379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.19:22-10.200.12.6:45480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:55.784536 kubelet[2531]: I1002 22:08:55.784512 2531 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c path="/var/lib/kubelet/pods/525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c/volumes" Oct 2 22:08:55.785294 kubelet[2531]: I1002 22:08:55.785277 2531 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=78dfb957-827a-4569-93f2-9f09a6bc01b5 path="/var/lib/kubelet/pods/78dfb957-827a-4569-93f2-9f09a6bc01b5/volumes" Oct 2 22:08:55.786000 audit[3556]: USER_ACCT pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:55.787754 sshd[3556]: Accepted publickey for core from 10.200.12.6 port 45480 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:08:55.788000 audit[3556]: CRED_ACQ pid=3556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:55.788000 audit[3556]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6774510 a2=3 a3=1 items=0 ppid=1 pid=3556 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:55.788000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:55.789659 sshd[3556]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:08:55.793815 systemd-logind[1367]: New session 32 of user core. Oct 2 22:08:55.793943 systemd[1]: Started session-32.scope. Oct 2 22:08:55.797000 audit[3556]: USER_START pid=3556 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:55.800000 audit[3558]: CRED_ACQ pid=3558 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:56.739288 kubelet[2531]: I1002 22:08:56.739252 2531 topology_manager.go:210] "Topology Admit Handler" Oct 2 22:08:56.739498 kubelet[2531]: E1002 22:08:56.739485 2531 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="78dfb957-827a-4569-93f2-9f09a6bc01b5" containerName="mount-cgroup" Oct 2 22:08:56.739562 kubelet[2531]: E1002 22:08:56.739554 2531 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="78dfb957-827a-4569-93f2-9f09a6bc01b5" containerName="mount-cgroup" Oct 2 22:08:56.739620 kubelet[2531]: E1002 22:08:56.739611 2531 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="78dfb957-827a-4569-93f2-9f09a6bc01b5" containerName="mount-cgroup" Oct 2 22:08:56.739685 kubelet[2531]: E1002 22:08:56.739675 2531 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c" containerName="cilium-operator" Oct 2 22:08:56.739746 kubelet[2531]: E1002 22:08:56.739738 2531 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="78dfb957-827a-4569-93f2-9f09a6bc01b5" containerName="mount-cgroup" Oct 2 22:08:56.739849 kubelet[2531]: I1002 22:08:56.739839 2531 memory_manager.go:346] "RemoveStaleState removing state" podUID="78dfb957-827a-4569-93f2-9f09a6bc01b5" containerName="mount-cgroup" Oct 2 22:08:56.739906 kubelet[2531]: I1002 22:08:56.739898 2531 memory_manager.go:346] "RemoveStaleState removing state" podUID="525a8bc4-4aa3-47e9-a85e-c9cc0ffb1b9c" containerName="cilium-operator" Oct 2 22:08:56.739959 kubelet[2531]: I1002 22:08:56.739951 2531 memory_manager.go:346] "RemoveStaleState removing state" podUID="78dfb957-827a-4569-93f2-9f09a6bc01b5" containerName="mount-cgroup" Oct 2 22:08:56.740014 kubelet[2531]: I1002 22:08:56.740005 2531 memory_manager.go:346] "RemoveStaleState removing state" podUID="78dfb957-827a-4569-93f2-9f09a6bc01b5" containerName="mount-cgroup" Oct 2 22:08:56.740074 kubelet[2531]: I1002 22:08:56.740066 2531 memory_manager.go:346] "RemoveStaleState removing state" podUID="78dfb957-827a-4569-93f2-9f09a6bc01b5" containerName="mount-cgroup" Oct 2 22:08:56.740126 kubelet[2531]: I1002 22:08:56.740118 2531 memory_manager.go:346] "RemoveStaleState removing state" podUID="78dfb957-827a-4569-93f2-9f09a6bc01b5" containerName="mount-cgroup" Oct 2 22:08:56.740195 kubelet[2531]: E1002 22:08:56.740185 2531 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="78dfb957-827a-4569-93f2-9f09a6bc01b5" containerName="mount-cgroup" Oct 2 22:08:56.740253 kubelet[2531]: E1002 22:08:56.740244 2531 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="78dfb957-827a-4569-93f2-9f09a6bc01b5" containerName="mount-cgroup" Oct 2 22:08:56.740325 kubelet[2531]: I1002 22:08:56.740315 2531 memory_manager.go:346] "RemoveStaleState removing state" podUID="78dfb957-827a-4569-93f2-9f09a6bc01b5" containerName="mount-cgroup" Oct 2 22:08:56.745266 systemd[1]: Created slice kubepods-burstable-pod53530535_1898_4ce4_8a60_18efbb50c525.slice. Oct 2 22:08:56.791558 kubelet[2531]: E1002 22:08:56.791534 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:56.837858 kubelet[2531]: I1002 22:08:56.837823 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-bpf-maps\") pod \"cilium-pfgpk\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " pod="kube-system/cilium-pfgpk" Oct 2 22:08:56.838067 kubelet[2531]: I1002 22:08:56.838055 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-cni-path\") pod \"cilium-pfgpk\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " pod="kube-system/cilium-pfgpk" Oct 2 22:08:56.838192 kubelet[2531]: I1002 22:08:56.838168 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-lib-modules\") pod \"cilium-pfgpk\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " pod="kube-system/cilium-pfgpk" Oct 2 22:08:56.838246 kubelet[2531]: I1002 22:08:56.838223 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/53530535-1898-4ce4-8a60-18efbb50c525-clustermesh-secrets\") pod \"cilium-pfgpk\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " pod="kube-system/cilium-pfgpk" Oct 2 22:08:56.838283 kubelet[2531]: I1002 22:08:56.838259 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/53530535-1898-4ce4-8a60-18efbb50c525-cilium-config-path\") pod \"cilium-pfgpk\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " pod="kube-system/cilium-pfgpk" Oct 2 22:08:56.838310 kubelet[2531]: I1002 22:08:56.838294 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/53530535-1898-4ce4-8a60-18efbb50c525-cilium-ipsec-secrets\") pod \"cilium-pfgpk\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " pod="kube-system/cilium-pfgpk" Oct 2 22:08:56.838337 kubelet[2531]: I1002 22:08:56.838318 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-host-proc-sys-net\") pod \"cilium-pfgpk\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " pod="kube-system/cilium-pfgpk" Oct 2 22:08:56.838376 kubelet[2531]: I1002 22:08:56.838359 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-xtables-lock\") pod \"cilium-pfgpk\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " pod="kube-system/cilium-pfgpk" Oct 2 22:08:56.838409 kubelet[2531]: I1002 22:08:56.838387 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-cilium-run\") pod \"cilium-pfgpk\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " pod="kube-system/cilium-pfgpk" Oct 2 22:08:56.838454 kubelet[2531]: I1002 22:08:56.838438 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-cilium-cgroup\") pod \"cilium-pfgpk\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " pod="kube-system/cilium-pfgpk" Oct 2 22:08:56.838489 kubelet[2531]: I1002 22:08:56.838464 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-etc-cni-netd\") pod \"cilium-pfgpk\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " pod="kube-system/cilium-pfgpk" Oct 2 22:08:56.838521 kubelet[2531]: I1002 22:08:56.838490 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rmgx4\" (UniqueName: \"kubernetes.io/projected/53530535-1898-4ce4-8a60-18efbb50c525-kube-api-access-rmgx4\") pod \"cilium-pfgpk\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " pod="kube-system/cilium-pfgpk" Oct 2 22:08:56.838576 kubelet[2531]: I1002 22:08:56.838527 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-hostproc\") pod \"cilium-pfgpk\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " pod="kube-system/cilium-pfgpk" Oct 2 22:08:56.838576 kubelet[2531]: I1002 22:08:56.838549 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-host-proc-sys-kernel\") pod \"cilium-pfgpk\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " pod="kube-system/cilium-pfgpk" Oct 2 22:08:56.838576 kubelet[2531]: I1002 22:08:56.838571 2531 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/53530535-1898-4ce4-8a60-18efbb50c525-hubble-tls\") pod \"cilium-pfgpk\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " pod="kube-system/cilium-pfgpk" Oct 2 22:08:57.049269 env[1377]: time="2023-10-02T22:08:57.048622542Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-pfgpk,Uid:53530535-1898-4ce4-8a60-18efbb50c525,Namespace:kube-system,Attempt:0,}" Oct 2 22:08:57.083963 env[1377]: time="2023-10-02T22:08:57.083888029Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 22:08:57.083963 env[1377]: time="2023-10-02T22:08:57.083930267Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 22:08:57.084168 env[1377]: time="2023-10-02T22:08:57.083962066Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 22:08:57.084267 env[1377]: time="2023-10-02T22:08:57.084215578Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8 pid=3576 runtime=io.containerd.runc.v2 Oct 2 22:08:57.097664 systemd[1]: Started cri-containerd-8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8.scope. Oct 2 22:08:57.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.113000 audit: BPF prog-id=132 op=LOAD Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3576 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:57.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862343834653766633739396365336438313734393664356136616330 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3576 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:57.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862343834653766633739396365336438313734393664356136616330 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit: BPF prog-id=133 op=LOAD Oct 2 22:08:57.114000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3576 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:57.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862343834653766633739396365336438313734393664356136616330 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit: BPF prog-id=134 op=LOAD Oct 2 22:08:57.114000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3576 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:57.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862343834653766633739396365336438313734393664356136616330 Oct 2 22:08:57.114000 audit: BPF prog-id=134 op=UNLOAD Oct 2 22:08:57.114000 audit: BPF prog-id=133 op=UNLOAD Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { perfmon } for pid=3585 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit[3585]: AVC avc: denied { bpf } for pid=3585 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:08:57.114000 audit: BPF prog-id=135 op=LOAD Oct 2 22:08:57.114000 audit[3585]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3576 pid=3585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:57.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862343834653766633739396365336438313734393664356136616330 Oct 2 22:08:57.129861 env[1377]: time="2023-10-02T22:08:57.129812327Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-pfgpk,Uid:53530535-1898-4ce4-8a60-18efbb50c525,Namespace:kube-system,Attempt:0,} returns sandbox id \"8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8\"" Oct 2 22:08:57.138986 env[1377]: time="2023-10-02T22:08:57.138946628Z" level=info msg="CreateContainer within sandbox \"8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 22:08:57.171658 env[1377]: time="2023-10-02T22:08:57.171609399Z" level=info msg="CreateContainer within sandbox \"8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a\"" Oct 2 22:08:57.173136 env[1377]: time="2023-10-02T22:08:57.172075584Z" level=info msg="StartContainer for \"ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a\"" Oct 2 22:08:57.192541 systemd[1]: Started cri-containerd-ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a.scope. Oct 2 22:08:57.210200 systemd[1]: cri-containerd-ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a.scope: Deactivated successfully. Oct 2 22:08:57.251520 env[1377]: time="2023-10-02T22:08:57.251469467Z" level=info msg="shim disconnected" id=ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a Oct 2 22:08:57.251786 env[1377]: time="2023-10-02T22:08:57.251745858Z" level=warning msg="cleaning up after shim disconnected" id=ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a namespace=k8s.io Oct 2 22:08:57.251863 env[1377]: time="2023-10-02T22:08:57.251848735Z" level=info msg="cleaning up dead shim" Oct 2 22:08:57.266569 env[1377]: time="2023-10-02T22:08:57.266529455Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:08:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3633 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:08:57Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:08:57.267024 env[1377]: time="2023-10-02T22:08:57.266970520Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 22:08:57.269196 env[1377]: time="2023-10-02T22:08:57.267811853Z" level=error msg="Failed to pipe stdout of container \"ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a\"" error="reading from a closed fifo" Oct 2 22:08:57.269394 env[1377]: time="2023-10-02T22:08:57.269140969Z" level=error msg="Failed to pipe stderr of container \"ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a\"" error="reading from a closed fifo" Oct 2 22:08:57.273725 env[1377]: time="2023-10-02T22:08:57.273669261Z" level=error msg="StartContainer for \"ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:08:57.274290 kubelet[2531]: E1002 22:08:57.274121 2531 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a" Oct 2 22:08:57.274290 kubelet[2531]: E1002 22:08:57.274225 2531 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:08:57.274290 kubelet[2531]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:08:57.274290 kubelet[2531]: rm /hostbin/cilium-mount Oct 2 22:08:57.274510 kubelet[2531]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rmgx4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-pfgpk_kube-system(53530535-1898-4ce4-8a60-18efbb50c525): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:08:57.274584 kubelet[2531]: E1002 22:08:57.274261 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-pfgpk" podUID=53530535-1898-4ce4-8a60-18efbb50c525 Oct 2 22:08:57.492723 env[1377]: time="2023-10-02T22:08:57.492673137Z" level=info msg="CreateContainer within sandbox \"8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 22:08:57.522917 env[1377]: time="2023-10-02T22:08:57.522835751Z" level=info msg="CreateContainer within sandbox \"8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff\"" Oct 2 22:08:57.523458 env[1377]: time="2023-10-02T22:08:57.523429491Z" level=info msg="StartContainer for \"eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff\"" Oct 2 22:08:57.543404 systemd[1]: Started cri-containerd-eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff.scope. Oct 2 22:08:57.561945 systemd[1]: cri-containerd-eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff.scope: Deactivated successfully. Oct 2 22:08:57.579580 env[1377]: time="2023-10-02T22:08:57.579530816Z" level=info msg="shim disconnected" id=eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff Oct 2 22:08:57.579812 env[1377]: time="2023-10-02T22:08:57.579793848Z" level=warning msg="cleaning up after shim disconnected" id=eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff namespace=k8s.io Oct 2 22:08:57.579880 env[1377]: time="2023-10-02T22:08:57.579868085Z" level=info msg="cleaning up dead shim" Oct 2 22:08:57.593293 env[1377]: time="2023-10-02T22:08:57.593249808Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:08:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3672 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:08:57Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:08:57.593691 env[1377]: time="2023-10-02T22:08:57.593637035Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 22:08:57.593970 env[1377]: time="2023-10-02T22:08:57.593938585Z" level=error msg="Failed to pipe stdout of container \"eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff\"" error="reading from a closed fifo" Oct 2 22:08:57.594092 env[1377]: time="2023-10-02T22:08:57.594069981Z" level=error msg="Failed to pipe stderr of container \"eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff\"" error="reading from a closed fifo" Oct 2 22:08:57.597977 env[1377]: time="2023-10-02T22:08:57.597934974Z" level=error msg="StartContainer for \"eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:08:57.598165 kubelet[2531]: E1002 22:08:57.598142 2531 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff" Oct 2 22:08:57.598256 kubelet[2531]: E1002 22:08:57.598240 2531 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:08:57.598256 kubelet[2531]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:08:57.598256 kubelet[2531]: rm /hostbin/cilium-mount Oct 2 22:08:57.598256 kubelet[2531]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rmgx4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-pfgpk_kube-system(53530535-1898-4ce4-8a60-18efbb50c525): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:08:57.598398 kubelet[2531]: E1002 22:08:57.598274 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-pfgpk" podUID=53530535-1898-4ce4-8a60-18efbb50c525 Oct 2 22:08:58.492543 kubelet[2531]: I1002 22:08:58.492513 2531 scope.go:115] "RemoveContainer" containerID="ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a" Oct 2 22:08:58.492904 kubelet[2531]: I1002 22:08:58.492830 2531 scope.go:115] "RemoveContainer" containerID="ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a" Oct 2 22:08:58.493901 env[1377]: time="2023-10-02T22:08:58.493872879Z" level=info msg="RemoveContainer for \"ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a\"" Oct 2 22:08:58.494328 env[1377]: time="2023-10-02T22:08:58.494296825Z" level=info msg="RemoveContainer for \"ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a\"" Oct 2 22:08:58.494412 env[1377]: time="2023-10-02T22:08:58.494378942Z" level=error msg="RemoveContainer for \"ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a\" failed" error="failed to set removing state for container \"ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a\": container is already in removing state" Oct 2 22:08:58.494557 kubelet[2531]: E1002 22:08:58.494529 2531 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a\": container is already in removing state" containerID="ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a" Oct 2 22:08:58.494610 kubelet[2531]: E1002 22:08:58.494562 2531 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a": container is already in removing state; Skipping pod "cilium-pfgpk_kube-system(53530535-1898-4ce4-8a60-18efbb50c525)" Oct 2 22:08:58.494830 kubelet[2531]: E1002 22:08:58.494812 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-pfgpk_kube-system(53530535-1898-4ce4-8a60-18efbb50c525)\"" pod="kube-system/cilium-pfgpk" podUID=53530535-1898-4ce4-8a60-18efbb50c525 Oct 2 22:08:58.502445 env[1377]: time="2023-10-02T22:08:58.502413960Z" level=info msg="RemoveContainer for \"ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a\" returns successfully" Oct 2 22:08:59.495943 kubelet[2531]: E1002 22:08:59.495917 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-pfgpk_kube-system(53530535-1898-4ce4-8a60-18efbb50c525)\"" pod="kube-system/cilium-pfgpk" podUID=53530535-1898-4ce4-8a60-18efbb50c525 Oct 2 22:09:00.355444 kubelet[2531]: W1002 22:09:00.355410 2531 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod53530535_1898_4ce4_8a60_18efbb50c525.slice/cri-containerd-ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a.scope WatchSource:0}: container "ddfa8fb7b73ad5af61d48f93fd8b2cb9b640927e450848d24718e704e039dd3a" in namespace "k8s.io": not found Oct 2 22:09:01.792501 kubelet[2531]: E1002 22:09:01.792478 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:03.461551 kubelet[2531]: W1002 22:09:03.461502 2531 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod53530535_1898_4ce4_8a60_18efbb50c525.slice/cri-containerd-eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff.scope WatchSource:0}: task eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff not found: not found Oct 2 22:09:06.793610 kubelet[2531]: E1002 22:09:06.793578 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:11.794888 kubelet[2531]: E1002 22:09:11.794855 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:14.784222 env[1377]: time="2023-10-02T22:09:14.784175084Z" level=info msg="CreateContainer within sandbox \"8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 22:09:14.807698 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3914030775.mount: Deactivated successfully. Oct 2 22:09:14.812501 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2610804106.mount: Deactivated successfully. Oct 2 22:09:14.823831 env[1377]: time="2023-10-02T22:09:14.823745055Z" level=info msg="CreateContainer within sandbox \"8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509\"" Oct 2 22:09:14.825616 env[1377]: time="2023-10-02T22:09:14.825586438Z" level=info msg="StartContainer for \"896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509\"" Oct 2 22:09:14.851262 systemd[1]: Started cri-containerd-896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509.scope. Oct 2 22:09:14.866557 systemd[1]: cri-containerd-896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509.scope: Deactivated successfully. Oct 2 22:09:14.891801 env[1377]: time="2023-10-02T22:09:14.891736623Z" level=info msg="shim disconnected" id=896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509 Oct 2 22:09:14.891801 env[1377]: time="2023-10-02T22:09:14.891798021Z" level=warning msg="cleaning up after shim disconnected" id=896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509 namespace=k8s.io Oct 2 22:09:14.891801 env[1377]: time="2023-10-02T22:09:14.891807861Z" level=info msg="cleaning up dead shim" Oct 2 22:09:14.906035 env[1377]: time="2023-10-02T22:09:14.905986261Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:09:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3712 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:09:14Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:09:14.906281 env[1377]: time="2023-10-02T22:09:14.906227293Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 22:09:14.907849 env[1377]: time="2023-10-02T22:09:14.907809684Z" level=error msg="Failed to pipe stdout of container \"896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509\"" error="reading from a closed fifo" Oct 2 22:09:14.907921 env[1377]: time="2023-10-02T22:09:14.907887402Z" level=error msg="Failed to pipe stderr of container \"896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509\"" error="reading from a closed fifo" Oct 2 22:09:14.912415 env[1377]: time="2023-10-02T22:09:14.912369343Z" level=error msg="StartContainer for \"896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:09:14.913053 kubelet[2531]: E1002 22:09:14.912603 2531 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509" Oct 2 22:09:14.913053 kubelet[2531]: E1002 22:09:14.912704 2531 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:09:14.913053 kubelet[2531]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:09:14.913053 kubelet[2531]: rm /hostbin/cilium-mount Oct 2 22:09:14.913432 kubelet[2531]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rmgx4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-pfgpk_kube-system(53530535-1898-4ce4-8a60-18efbb50c525): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:09:14.913487 kubelet[2531]: E1002 22:09:14.912737 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-pfgpk" podUID=53530535-1898-4ce4-8a60-18efbb50c525 Oct 2 22:09:15.520812 kubelet[2531]: I1002 22:09:15.520290 2531 scope.go:115] "RemoveContainer" containerID="eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff" Oct 2 22:09:15.520812 kubelet[2531]: I1002 22:09:15.520605 2531 scope.go:115] "RemoveContainer" containerID="eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff" Oct 2 22:09:15.521851 env[1377]: time="2023-10-02T22:09:15.521812463Z" level=info msg="RemoveContainer for \"eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff\"" Oct 2 22:09:15.522194 env[1377]: time="2023-10-02T22:09:15.522166012Z" level=info msg="RemoveContainer for \"eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff\"" Oct 2 22:09:15.522267 env[1377]: time="2023-10-02T22:09:15.522236210Z" level=error msg="RemoveContainer for \"eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff\" failed" error="failed to set removing state for container \"eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff\": container is already in removing state" Oct 2 22:09:15.522918 kubelet[2531]: E1002 22:09:15.522390 2531 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff\": container is already in removing state" containerID="eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff" Oct 2 22:09:15.522918 kubelet[2531]: E1002 22:09:15.522419 2531 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff": container is already in removing state; Skipping pod "cilium-pfgpk_kube-system(53530535-1898-4ce4-8a60-18efbb50c525)" Oct 2 22:09:15.522918 kubelet[2531]: E1002 22:09:15.522649 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-pfgpk_kube-system(53530535-1898-4ce4-8a60-18efbb50c525)\"" pod="kube-system/cilium-pfgpk" podUID=53530535-1898-4ce4-8a60-18efbb50c525 Oct 2 22:09:15.530589 env[1377]: time="2023-10-02T22:09:15.530545312Z" level=info msg="RemoveContainer for \"eb2699841e38268adb1d90c6e074d85707071d88741a0a32aa899e14fd257bff\" returns successfully" Oct 2 22:09:15.805218 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509-rootfs.mount: Deactivated successfully. Oct 2 22:09:16.795945 kubelet[2531]: E1002 22:09:16.795910 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:17.997023 kubelet[2531]: W1002 22:09:17.996984 2531 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod53530535_1898_4ce4_8a60_18efbb50c525.slice/cri-containerd-896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509.scope WatchSource:0}: task 896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509 not found: not found Oct 2 22:09:21.796712 kubelet[2531]: E1002 22:09:21.796672 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:26.797774 kubelet[2531]: E1002 22:09:26.797742 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:29.782442 kubelet[2531]: E1002 22:09:29.782408 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-pfgpk_kube-system(53530535-1898-4ce4-8a60-18efbb50c525)\"" pod="kube-system/cilium-pfgpk" podUID=53530535-1898-4ce4-8a60-18efbb50c525 Oct 2 22:09:31.798987 kubelet[2531]: E1002 22:09:31.798944 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:36.799855 kubelet[2531]: E1002 22:09:36.799822 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:41.801290 kubelet[2531]: E1002 22:09:41.801259 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:44.784419 env[1377]: time="2023-10-02T22:09:44.784372325Z" level=info msg="CreateContainer within sandbox \"8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 22:09:44.813088 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4196576801.mount: Deactivated successfully. Oct 2 22:09:44.826006 env[1377]: time="2023-10-02T22:09:44.825962135Z" level=info msg="CreateContainer within sandbox \"8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864\"" Oct 2 22:09:44.826468 env[1377]: time="2023-10-02T22:09:44.826441921Z" level=info msg="StartContainer for \"b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864\"" Oct 2 22:09:44.853679 systemd[1]: Started cri-containerd-b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864.scope. Oct 2 22:09:44.869776 systemd[1]: cri-containerd-b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864.scope: Deactivated successfully. Oct 2 22:09:44.892133 env[1377]: time="2023-10-02T22:09:44.892075802Z" level=info msg="shim disconnected" id=b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864 Oct 2 22:09:44.892133 env[1377]: time="2023-10-02T22:09:44.892129081Z" level=warning msg="cleaning up after shim disconnected" id=b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864 namespace=k8s.io Oct 2 22:09:44.892133 env[1377]: time="2023-10-02T22:09:44.892139000Z" level=info msg="cleaning up dead shim" Oct 2 22:09:44.903836 env[1377]: time="2023-10-02T22:09:44.903787547Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:09:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3750 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:09:44Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:09:44.904087 env[1377]: time="2023-10-02T22:09:44.904027020Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 22:09:44.905124 env[1377]: time="2023-10-02T22:09:44.905091470Z" level=error msg="Failed to pipe stderr of container \"b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864\"" error="reading from a closed fifo" Oct 2 22:09:44.905831 env[1377]: time="2023-10-02T22:09:44.905803809Z" level=error msg="Failed to pipe stdout of container \"b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864\"" error="reading from a closed fifo" Oct 2 22:09:44.910708 env[1377]: time="2023-10-02T22:09:44.910666550Z" level=error msg="StartContainer for \"b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:09:44.912376 kubelet[2531]: E1002 22:09:44.910989 2531 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864" Oct 2 22:09:44.912376 kubelet[2531]: E1002 22:09:44.911081 2531 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:09:44.912376 kubelet[2531]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:09:44.912376 kubelet[2531]: rm /hostbin/cilium-mount Oct 2 22:09:44.912744 kubelet[2531]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rmgx4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-pfgpk_kube-system(53530535-1898-4ce4-8a60-18efbb50c525): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:09:44.912820 kubelet[2531]: E1002 22:09:44.911113 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-pfgpk" podUID=53530535-1898-4ce4-8a60-18efbb50c525 Oct 2 22:09:45.566695 kubelet[2531]: I1002 22:09:45.566671 2531 scope.go:115] "RemoveContainer" containerID="896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509" Oct 2 22:09:45.566959 kubelet[2531]: I1002 22:09:45.566926 2531 scope.go:115] "RemoveContainer" containerID="896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509" Oct 2 22:09:45.568259 env[1377]: time="2023-10-02T22:09:45.568216568Z" level=info msg="RemoveContainer for \"896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509\"" Oct 2 22:09:45.569023 env[1377]: time="2023-10-02T22:09:45.568940307Z" level=info msg="RemoveContainer for \"896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509\"" Oct 2 22:09:45.569107 env[1377]: time="2023-10-02T22:09:45.569067464Z" level=error msg="RemoveContainer for \"896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509\" failed" error="failed to set removing state for container \"896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509\": container is already in removing state" Oct 2 22:09:45.569217 kubelet[2531]: E1002 22:09:45.569193 2531 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509\": container is already in removing state" containerID="896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509" Oct 2 22:09:45.569269 kubelet[2531]: E1002 22:09:45.569229 2531 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509": container is already in removing state; Skipping pod "cilium-pfgpk_kube-system(53530535-1898-4ce4-8a60-18efbb50c525)" Oct 2 22:09:45.569487 kubelet[2531]: E1002 22:09:45.569469 2531 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-pfgpk_kube-system(53530535-1898-4ce4-8a60-18efbb50c525)\"" pod="kube-system/cilium-pfgpk" podUID=53530535-1898-4ce4-8a60-18efbb50c525 Oct 2 22:09:45.579430 env[1377]: time="2023-10-02T22:09:45.579384929Z" level=info msg="RemoveContainer for \"896a4aa8acca7a29b73f188509fa77d2f8a3458d33cfd737a06e7315d1026509\" returns successfully" Oct 2 22:09:45.809701 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864-rootfs.mount: Deactivated successfully. Oct 2 22:09:46.802222 kubelet[2531]: E1002 22:09:46.802192 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:47.997310 kubelet[2531]: W1002 22:09:47.997261 2531 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod53530535_1898_4ce4_8a60_18efbb50c525.slice/cri-containerd-b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864.scope WatchSource:0}: task b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864 not found: not found Oct 2 22:09:48.206000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:48.212985 kernel: kauditd_printk_skb: 64 callbacks suppressed Oct 2 22:09:48.213097 kernel: audit: type=1400 audit(1696284588.206:1403): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:48.206000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:48.258225 kernel: audit: type=1400 audit(1696284588.206:1404): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521260 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:48.206000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=400baae240 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:09:48.286011 kernel: audit: type=1300 audit(1696284588.206:1404): arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=400baae240 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:09:48.286111 kernel: audit: type=1327 audit(1696284588.206:1404): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:09:48.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:09:48.207000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:48.333645 kernel: audit: type=1400 audit(1696284588.207:1405): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:48.333752 kernel: audit: type=1300 audit(1696284588.207:1405): arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=400baae420 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:09:48.207000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=400baae420 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:09:48.207000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:09:48.384718 kernel: audit: type=1327 audit(1696284588.207:1405): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:09:48.384958 kernel: audit: type=1300 audit(1696284588.206:1403): arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40019577a0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:09:48.206000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=40019577a0 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:09:48.206000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:09:48.436983 kernel: audit: type=1327 audit(1696284588.206:1403): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:09:48.222000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:48.460336 kernel: audit: type=1400 audit(1696284588.222:1406): avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521266 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:48.222000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4000e34300 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:09:48.222000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:09:48.289000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:48.289000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40012591d0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:09:48.289000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:09:48.309000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:48.309000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001f4c4e0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:09:48.309000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:09:48.385000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:48.385000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4004088360 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:09:48.385000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:09:48.385000 audit[2412]: AVC avc: denied { watch } for pid=2412 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:48.385000 audit[2412]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=4000e34540 a2=fc6 a3=0 items=0 ppid=2271 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c199,c341 key=(null) Oct 2 22:09:48.385000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:09:50.977000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:50.977000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:50.977000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001f4c6e0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:09:50.977000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:09:50.977000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001225ac0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:09:50.977000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:09:50.985000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:50.985000 audit[2419]: AVC avc: denied { watch } for pid=2419 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:50.985000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001225ae0 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:09:50.985000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:09:50.985000 audit[2419]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4001f4c800 a2=fc6 a3=0 items=0 ppid=2267 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:09:50.985000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:09:51.595229 env[1377]: time="2023-10-02T22:09:51.595026503Z" level=info msg="StopPodSandbox for \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\"" Oct 2 22:09:51.595229 env[1377]: time="2023-10-02T22:09:51.595119780Z" level=info msg="TearDown network for sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" successfully" Oct 2 22:09:51.595229 env[1377]: time="2023-10-02T22:09:51.595162379Z" level=info msg="StopPodSandbox for \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" returns successfully" Oct 2 22:09:51.595599 env[1377]: time="2023-10-02T22:09:51.595470890Z" level=info msg="RemovePodSandbox for \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\"" Oct 2 22:09:51.595599 env[1377]: time="2023-10-02T22:09:51.595494529Z" level=info msg="Forcibly stopping sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\"" Oct 2 22:09:51.595599 env[1377]: time="2023-10-02T22:09:51.595551448Z" level=info msg="TearDown network for sandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" successfully" Oct 2 22:09:51.603969 env[1377]: time="2023-10-02T22:09:51.603887853Z" level=info msg="RemovePodSandbox \"4a02d1412045e83810417e7d7bc58c512470f9e036bcd4d47e4adcd449e16edb\" returns successfully" Oct 2 22:09:51.604496 env[1377]: time="2023-10-02T22:09:51.604358000Z" level=info msg="StopPodSandbox for \"60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48\"" Oct 2 22:09:51.604496 env[1377]: time="2023-10-02T22:09:51.604425118Z" level=info msg="TearDown network for sandbox \"60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48\" successfully" Oct 2 22:09:51.604496 env[1377]: time="2023-10-02T22:09:51.604451957Z" level=info msg="StopPodSandbox for \"60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48\" returns successfully" Oct 2 22:09:51.604869 env[1377]: time="2023-10-02T22:09:51.604833507Z" level=info msg="RemovePodSandbox for \"60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48\"" Oct 2 22:09:51.604943 env[1377]: time="2023-10-02T22:09:51.604872026Z" level=info msg="Forcibly stopping sandbox \"60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48\"" Oct 2 22:09:51.604943 env[1377]: time="2023-10-02T22:09:51.604930504Z" level=info msg="TearDown network for sandbox \"60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48\" successfully" Oct 2 22:09:51.616166 env[1377]: time="2023-10-02T22:09:51.616124789Z" level=info msg="RemovePodSandbox \"60ee2122b191cf3cdcc5a252737ca321086f9853bd7b52b433bcc88583c7fe48\" returns successfully" Oct 2 22:09:51.803642 kubelet[2531]: E1002 22:09:51.803617 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:56.804925 kubelet[2531]: E1002 22:09:56.804894 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:57.957377 env[1377]: time="2023-10-02T22:09:57.957330001Z" level=info msg="StopPodSandbox for \"8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8\"" Oct 2 22:09:57.957750 env[1377]: time="2023-10-02T22:09:57.957393599Z" level=info msg="Container to stop \"b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 22:09:57.958873 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8-shm.mount: Deactivated successfully. Oct 2 22:09:57.968000 audit: BPF prog-id=132 op=UNLOAD Oct 2 22:09:57.968738 systemd[1]: cri-containerd-8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8.scope: Deactivated successfully. Oct 2 22:09:57.974591 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 22:09:57.974693 kernel: audit: type=1334 audit(1696284597.968:1415): prog-id=132 op=UNLOAD Oct 2 22:09:57.984000 audit: BPF prog-id=135 op=UNLOAD Oct 2 22:09:57.997801 kernel: audit: type=1334 audit(1696284597.984:1416): prog-id=135 op=UNLOAD Oct 2 22:09:58.018411 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8-rootfs.mount: Deactivated successfully. Oct 2 22:09:58.065444 sshd[3556]: pam_unix(sshd:session): session closed for user core Oct 2 22:09:58.066000 audit[3556]: USER_END pid=3556 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:58.095229 systemd[1]: sshd@29-10.200.20.19:22-10.200.12.6:45480.service: Deactivated successfully. Oct 2 22:09:58.066000 audit[3556]: CRED_DISP pid=3556 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:58.095994 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 22:09:58.116773 kernel: audit: type=1106 audit(1696284598.066:1417): pid=3556 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:58.116861 kernel: audit: type=1104 audit(1696284598.066:1418): pid=3556 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:58.094000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.19:22-10.200.12.6:45480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:09:58.118328 env[1377]: time="2023-10-02T22:09:58.118289304Z" level=info msg="shim disconnected" id=8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8 Oct 2 22:09:58.118531 env[1377]: time="2023-10-02T22:09:58.118515057Z" level=warning msg="cleaning up after shim disconnected" id=8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8 namespace=k8s.io Oct 2 22:09:58.118620 env[1377]: time="2023-10-02T22:09:58.118607655Z" level=info msg="cleaning up dead shim" Oct 2 22:09:58.134208 env[1377]: time="2023-10-02T22:09:58.134165384Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:09:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3782 runtime=io.containerd.runc.v2\n" Oct 2 22:09:58.134628 env[1377]: time="2023-10-02T22:09:58.134604292Z" level=info msg="TearDown network for sandbox \"8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8\" successfully" Oct 2 22:09:58.134732 env[1377]: time="2023-10-02T22:09:58.134714929Z" level=info msg="StopPodSandbox for \"8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8\" returns successfully" Oct 2 22:09:58.139347 kernel: audit: type=1131 audit(1696284598.094:1419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.19:22-10.200.12.6:45480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:09:58.139462 systemd-logind[1367]: Session 32 logged out. Waiting for processes to exit. Oct 2 22:09:58.140205 systemd-logind[1367]: Removed session 32. Oct 2 22:09:58.264960 kubelet[2531]: I1002 22:09:58.264363 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-cilium-run\") pod \"53530535-1898-4ce4-8a60-18efbb50c525\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " Oct 2 22:09:58.264960 kubelet[2531]: I1002 22:09:58.264404 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-hostproc\") pod \"53530535-1898-4ce4-8a60-18efbb50c525\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " Oct 2 22:09:58.264960 kubelet[2531]: I1002 22:09:58.264430 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/53530535-1898-4ce4-8a60-18efbb50c525-hubble-tls\") pod \"53530535-1898-4ce4-8a60-18efbb50c525\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " Oct 2 22:09:58.264960 kubelet[2531]: I1002 22:09:58.264453 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/53530535-1898-4ce4-8a60-18efbb50c525-clustermesh-secrets\") pod \"53530535-1898-4ce4-8a60-18efbb50c525\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " Oct 2 22:09:58.264960 kubelet[2531]: I1002 22:09:58.264471 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-host-proc-sys-net\") pod \"53530535-1898-4ce4-8a60-18efbb50c525\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " Oct 2 22:09:58.264960 kubelet[2531]: I1002 22:09:58.264490 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-cilium-cgroup\") pod \"53530535-1898-4ce4-8a60-18efbb50c525\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " Oct 2 22:09:58.265396 kubelet[2531]: I1002 22:09:58.264506 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-xtables-lock\") pod \"53530535-1898-4ce4-8a60-18efbb50c525\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " Oct 2 22:09:58.265396 kubelet[2531]: I1002 22:09:58.264528 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/53530535-1898-4ce4-8a60-18efbb50c525-cilium-config-path\") pod \"53530535-1898-4ce4-8a60-18efbb50c525\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " Oct 2 22:09:58.265396 kubelet[2531]: I1002 22:09:58.264545 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-lib-modules\") pod \"53530535-1898-4ce4-8a60-18efbb50c525\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " Oct 2 22:09:58.265396 kubelet[2531]: I1002 22:09:58.264562 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-bpf-maps\") pod \"53530535-1898-4ce4-8a60-18efbb50c525\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " Oct 2 22:09:58.265396 kubelet[2531]: I1002 22:09:58.264582 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-rmgx4\" (UniqueName: \"kubernetes.io/projected/53530535-1898-4ce4-8a60-18efbb50c525-kube-api-access-rmgx4\") pod \"53530535-1898-4ce4-8a60-18efbb50c525\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " Oct 2 22:09:58.265396 kubelet[2531]: I1002 22:09:58.264755 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/53530535-1898-4ce4-8a60-18efbb50c525-cilium-ipsec-secrets\") pod \"53530535-1898-4ce4-8a60-18efbb50c525\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " Oct 2 22:09:58.265536 kubelet[2531]: I1002 22:09:58.264848 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-etc-cni-netd\") pod \"53530535-1898-4ce4-8a60-18efbb50c525\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " Oct 2 22:09:58.265536 kubelet[2531]: I1002 22:09:58.264900 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-host-proc-sys-kernel\") pod \"53530535-1898-4ce4-8a60-18efbb50c525\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " Oct 2 22:09:58.265536 kubelet[2531]: I1002 22:09:58.264922 2531 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-cni-path\") pod \"53530535-1898-4ce4-8a60-18efbb50c525\" (UID: \"53530535-1898-4ce4-8a60-18efbb50c525\") " Oct 2 22:09:58.265536 kubelet[2531]: I1002 22:09:58.265017 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-cni-path" (OuterVolumeSpecName: "cni-path") pod "53530535-1898-4ce4-8a60-18efbb50c525" (UID: "53530535-1898-4ce4-8a60-18efbb50c525"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:58.265536 kubelet[2531]: I1002 22:09:58.265048 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "53530535-1898-4ce4-8a60-18efbb50c525" (UID: "53530535-1898-4ce4-8a60-18efbb50c525"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:58.265649 kubelet[2531]: I1002 22:09:58.265063 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-hostproc" (OuterVolumeSpecName: "hostproc") pod "53530535-1898-4ce4-8a60-18efbb50c525" (UID: "53530535-1898-4ce4-8a60-18efbb50c525"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:58.265649 kubelet[2531]: I1002 22:09:58.265331 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "53530535-1898-4ce4-8a60-18efbb50c525" (UID: "53530535-1898-4ce4-8a60-18efbb50c525"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:58.265649 kubelet[2531]: I1002 22:09:58.265483 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "53530535-1898-4ce4-8a60-18efbb50c525" (UID: "53530535-1898-4ce4-8a60-18efbb50c525"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:58.265649 kubelet[2531]: I1002 22:09:58.265503 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "53530535-1898-4ce4-8a60-18efbb50c525" (UID: "53530535-1898-4ce4-8a60-18efbb50c525"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:58.265649 kubelet[2531]: I1002 22:09:58.265518 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "53530535-1898-4ce4-8a60-18efbb50c525" (UID: "53530535-1898-4ce4-8a60-18efbb50c525"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:58.265781 kubelet[2531]: W1002 22:09:58.265606 2531 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/53530535-1898-4ce4-8a60-18efbb50c525/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 22:09:58.267451 kubelet[2531]: I1002 22:09:58.266117 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "53530535-1898-4ce4-8a60-18efbb50c525" (UID: "53530535-1898-4ce4-8a60-18efbb50c525"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:58.267451 kubelet[2531]: I1002 22:09:58.267207 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/53530535-1898-4ce4-8a60-18efbb50c525-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "53530535-1898-4ce4-8a60-18efbb50c525" (UID: "53530535-1898-4ce4-8a60-18efbb50c525"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 22:09:58.267451 kubelet[2531]: I1002 22:09:58.267248 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "53530535-1898-4ce4-8a60-18efbb50c525" (UID: "53530535-1898-4ce4-8a60-18efbb50c525"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:58.267451 kubelet[2531]: I1002 22:09:58.267412 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "53530535-1898-4ce4-8a60-18efbb50c525" (UID: "53530535-1898-4ce4-8a60-18efbb50c525"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:58.271298 systemd[1]: var-lib-kubelet-pods-53530535\x2d1898\x2d4ce4\x2d8a60\x2d18efbb50c525-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 22:09:58.273471 kubelet[2531]: I1002 22:09:58.273447 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/53530535-1898-4ce4-8a60-18efbb50c525-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "53530535-1898-4ce4-8a60-18efbb50c525" (UID: "53530535-1898-4ce4-8a60-18efbb50c525"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 22:09:58.275934 systemd[1]: var-lib-kubelet-pods-53530535\x2d1898\x2d4ce4\x2d8a60\x2d18efbb50c525-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2drmgx4.mount: Deactivated successfully. Oct 2 22:09:58.276624 kubelet[2531]: I1002 22:09:58.276584 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/53530535-1898-4ce4-8a60-18efbb50c525-kube-api-access-rmgx4" (OuterVolumeSpecName: "kube-api-access-rmgx4") pod "53530535-1898-4ce4-8a60-18efbb50c525" (UID: "53530535-1898-4ce4-8a60-18efbb50c525"). InnerVolumeSpecName "kube-api-access-rmgx4". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 22:09:58.279067 kubelet[2531]: I1002 22:09:58.279044 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/53530535-1898-4ce4-8a60-18efbb50c525-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "53530535-1898-4ce4-8a60-18efbb50c525" (UID: "53530535-1898-4ce4-8a60-18efbb50c525"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 22:09:58.279228 systemd[1]: var-lib-kubelet-pods-53530535\x2d1898\x2d4ce4\x2d8a60\x2d18efbb50c525-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 22:09:58.279310 systemd[1]: var-lib-kubelet-pods-53530535\x2d1898\x2d4ce4\x2d8a60\x2d18efbb50c525-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 22:09:58.280188 kubelet[2531]: I1002 22:09:58.280118 2531 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/53530535-1898-4ce4-8a60-18efbb50c525-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "53530535-1898-4ce4-8a60-18efbb50c525" (UID: "53530535-1898-4ce4-8a60-18efbb50c525"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 22:09:58.365385 kubelet[2531]: I1002 22:09:58.365357 2531 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-cni-path\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:09:58.365557 kubelet[2531]: I1002 22:09:58.365547 2531 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/53530535-1898-4ce4-8a60-18efbb50c525-hubble-tls\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:09:58.365647 kubelet[2531]: I1002 22:09:58.365638 2531 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-cilium-run\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:09:58.365719 kubelet[2531]: I1002 22:09:58.365711 2531 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-hostproc\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:09:58.365815 kubelet[2531]: I1002 22:09:58.365807 2531 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-host-proc-sys-net\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:09:58.365898 kubelet[2531]: I1002 22:09:58.365890 2531 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-cilium-cgroup\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:09:58.365965 kubelet[2531]: I1002 22:09:58.365957 2531 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/53530535-1898-4ce4-8a60-18efbb50c525-clustermesh-secrets\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:09:58.366029 kubelet[2531]: I1002 22:09:58.366021 2531 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/53530535-1898-4ce4-8a60-18efbb50c525-cilium-config-path\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:09:58.366124 kubelet[2531]: I1002 22:09:58.366116 2531 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-xtables-lock\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:09:58.366198 kubelet[2531]: I1002 22:09:58.366190 2531 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-lib-modules\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:09:58.366265 kubelet[2531]: I1002 22:09:58.366258 2531 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-bpf-maps\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:09:58.366331 kubelet[2531]: I1002 22:09:58.366322 2531 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-rmgx4\" (UniqueName: \"kubernetes.io/projected/53530535-1898-4ce4-8a60-18efbb50c525-kube-api-access-rmgx4\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:09:58.366396 kubelet[2531]: I1002 22:09:58.366388 2531 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/53530535-1898-4ce4-8a60-18efbb50c525-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:09:58.366468 kubelet[2531]: I1002 22:09:58.366460 2531 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-etc-cni-netd\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:09:58.366533 kubelet[2531]: I1002 22:09:58.366525 2531 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/53530535-1898-4ce4-8a60-18efbb50c525-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-02d4509438\" DevicePath \"\"" Oct 2 22:09:58.589696 kubelet[2531]: I1002 22:09:58.589668 2531 scope.go:115] "RemoveContainer" containerID="b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864" Oct 2 22:09:58.590726 env[1377]: time="2023-10-02T22:09:58.590689231Z" level=info msg="RemoveContainer for \"b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864\"" Oct 2 22:09:58.597299 systemd[1]: Removed slice kubepods-burstable-pod53530535_1898_4ce4_8a60_18efbb50c525.slice. Oct 2 22:09:58.600285 env[1377]: time="2023-10-02T22:09:58.600245727Z" level=info msg="RemoveContainer for \"b954c2b35ac5e778eb01dc8a1f89786d4756ecd084a53f7891a6b7a4ace28864\" returns successfully" Oct 2 22:09:59.783326 env[1377]: time="2023-10-02T22:09:59.783283119Z" level=info msg="StopPodSandbox for \"8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8\"" Oct 2 22:09:59.783646 env[1377]: time="2023-10-02T22:09:59.783368797Z" level=info msg="TearDown network for sandbox \"8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8\" successfully" Oct 2 22:09:59.783646 env[1377]: time="2023-10-02T22:09:59.783401276Z" level=info msg="StopPodSandbox for \"8b484e7fc799ce3d817496d5a6ac06473147cb278db100a1581011e869e633e8\" returns successfully" Oct 2 22:09:59.785101 kubelet[2531]: I1002 22:09:59.785078 2531 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=53530535-1898-4ce4-8a60-18efbb50c525 path="/var/lib/kubelet/pods/53530535-1898-4ce4-8a60-18efbb50c525/volumes" Oct 2 22:10:01.806082 kubelet[2531]: E1002 22:10:01.806046 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:06.807393 kubelet[2531]: E1002 22:10:06.807321 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:11.809102 kubelet[2531]: E1002 22:10:11.809066 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:12.042634 systemd[1]: cri-containerd-90477bfc81bc5289f650d9bc8a6efb597e16e34eb6092807405683b95d5b04fe.scope: Deactivated successfully. Oct 2 22:10:12.042942 systemd[1]: cri-containerd-90477bfc81bc5289f650d9bc8a6efb597e16e34eb6092807405683b95d5b04fe.scope: Consumed 4.718s CPU time. Oct 2 22:10:12.046000 audit: BPF prog-id=88 op=UNLOAD Oct 2 22:10:12.046000 audit: BPF prog-id=101 op=UNLOAD Oct 2 22:10:12.060821 kernel: audit: type=1334 audit(1696284612.046:1420): prog-id=88 op=UNLOAD Oct 2 22:10:12.061027 kernel: audit: type=1334 audit(1696284612.046:1421): prog-id=101 op=UNLOAD Oct 2 22:10:12.073435 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-90477bfc81bc5289f650d9bc8a6efb597e16e34eb6092807405683b95d5b04fe-rootfs.mount: Deactivated successfully. Oct 2 22:10:12.134268 env[1377]: time="2023-10-02T22:10:12.134223659Z" level=info msg="shim disconnected" id=90477bfc81bc5289f650d9bc8a6efb597e16e34eb6092807405683b95d5b04fe Oct 2 22:10:12.134817 env[1377]: time="2023-10-02T22:10:12.134794084Z" level=warning msg="cleaning up after shim disconnected" id=90477bfc81bc5289f650d9bc8a6efb597e16e34eb6092807405683b95d5b04fe namespace=k8s.io Oct 2 22:10:12.134899 env[1377]: time="2023-10-02T22:10:12.134886081Z" level=info msg="cleaning up dead shim" Oct 2 22:10:12.147963 env[1377]: time="2023-10-02T22:10:12.147926171Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:10:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3813 runtime=io.containerd.runc.v2\n" Oct 2 22:10:12.611237 kubelet[2531]: I1002 22:10:12.611209 2531 scope.go:115] "RemoveContainer" containerID="90477bfc81bc5289f650d9bc8a6efb597e16e34eb6092807405683b95d5b04fe" Oct 2 22:10:12.613401 env[1377]: time="2023-10-02T22:10:12.613367729Z" level=info msg="CreateContainer within sandbox \"acb81f9bb5da279a4adb0a4018ba6197cd447be645be44335ac2c040371cb343\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 22:10:12.636983 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3336988046.mount: Deactivated successfully. Oct 2 22:10:12.651736 env[1377]: time="2023-10-02T22:10:12.651686221Z" level=info msg="CreateContainer within sandbox \"acb81f9bb5da279a4adb0a4018ba6197cd447be645be44335ac2c040371cb343\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"77af30ada50e6f7148b1615479d11ba0ee7584464a6ec287697a1138625220ab\"" Oct 2 22:10:12.652302 env[1377]: time="2023-10-02T22:10:12.652281685Z" level=info msg="StartContainer for \"77af30ada50e6f7148b1615479d11ba0ee7584464a6ec287697a1138625220ab\"" Oct 2 22:10:12.671298 systemd[1]: Started cri-containerd-77af30ada50e6f7148b1615479d11ba0ee7584464a6ec287697a1138625220ab.scope. Oct 2 22:10:12.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.726475 kernel: audit: type=1400 audit(1696284612.691:1422): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.726585 kernel: audit: type=1400 audit(1696284612.691:1423): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.726624 kernel: audit: type=1400 audit(1696284612.691:1424): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.760876 kernel: audit: type=1400 audit(1696284612.691:1425): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.760955 kernel: audit: type=1400 audit(1696284612.691:1426): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.795700 kernel: audit: type=1400 audit(1696284612.691:1427): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.800340 kernel: audit: type=1400 audit(1696284612.691:1428): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.829634 kernel: audit: type=1400 audit(1696284612.691:1429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.691000 audit: BPF prog-id=136 op=LOAD Oct 2 22:10:12.698000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.698000 audit[3833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2267 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:12.698000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737616633306164613530653666373134386231363135343739643131 Oct 2 22:10:12.698000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.698000 audit[3833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2267 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:12.698000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737616633306164613530653666373134386231363135343739643131 Oct 2 22:10:12.698000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.698000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.698000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.698000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.698000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.698000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.698000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.698000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.698000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.698000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.698000 audit: BPF prog-id=137 op=LOAD Oct 2 22:10:12.698000 audit[3833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2267 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:12.698000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737616633306164613530653666373134386231363135343739643131 Oct 2 22:10:12.708000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.708000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.708000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.708000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.708000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.708000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.708000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.708000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.708000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.708000 audit: BPF prog-id=138 op=LOAD Oct 2 22:10:12.708000 audit[3833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2267 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:12.708000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737616633306164613530653666373134386231363135343739643131 Oct 2 22:10:12.709000 audit: BPF prog-id=138 op=UNLOAD Oct 2 22:10:12.709000 audit: BPF prog-id=137 op=UNLOAD Oct 2 22:10:12.709000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.709000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.709000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.709000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.709000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.709000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.709000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.709000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.709000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.709000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:12.709000 audit: BPF prog-id=139 op=LOAD Oct 2 22:10:12.709000 audit[3833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2267 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:12.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737616633306164613530653666373134386231363135343739643131 Oct 2 22:10:12.850731 env[1377]: time="2023-10-02T22:10:12.850683524Z" level=info msg="StartContainer for \"77af30ada50e6f7148b1615479d11ba0ee7584464a6ec287697a1138625220ab\" returns successfully" Oct 2 22:10:14.682000 audit[3843]: AVC avc: denied { watch } for pid=3843 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521264 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:14.682000 audit[3843]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000326ed0 a2=fc6 a3=0 items=0 ppid=2267 pid=3843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:10:14.682000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:10:14.683000 audit[3843]: AVC avc: denied { watch } for pid=3843 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:14.683000 audit[3843]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400027e4e0 a2=fc6 a3=0 items=0 ppid=2267 pid=3843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c845,c869 key=(null) Oct 2 22:10:14.683000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:10:16.809812 kubelet[2531]: E1002 22:10:16.809789 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:16.830590 kubelet[2531]: E1002 22:10:16.830494 2531 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"kube-apiserver-ci-3510.3.0-a-02d4509438.178a69dcba3ac524", GenerateName:"", Namespace:"kube-system", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Pod", Namespace:"kube-system", Name:"kube-apiserver-ci-3510.3.0-a-02d4509438", UID:"5823838bb67fe64a218f542b0f6bd660", APIVersion:"v1", ResourceVersion:"", FieldPath:"spec.containers{kube-apiserver}"}, Reason:"Unhealthy", Message:"Readiness probe failed: HTTP probe failed with statuscode: 500", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-02d4509438"}, FirstTimestamp:time.Date(2023, time.October, 2, 22, 10, 6, 396548388, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 22, 10, 6, 396548388, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.19:40546->10.200.20.14:2379: read: connection timed out' (will not retry!) Oct 2 22:10:17.468934 kubelet[2531]: E1002 22:10:17.468895 2531 controller.go:189] failed to update lease, error: rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.19:40730->10.200.20.14:2379: read: connection timed out Oct 2 22:10:17.475521 systemd[1]: cri-containerd-7b59da32776b09c9785040b9f05bce75e28f3994a683c3d4970c31086b5b5207.scope: Deactivated successfully. Oct 2 22:10:17.475853 systemd[1]: cri-containerd-7b59da32776b09c9785040b9f05bce75e28f3994a683c3d4970c31086b5b5207.scope: Consumed 2.215s CPU time. Oct 2 22:10:17.479000 audit: BPF prog-id=83 op=UNLOAD Oct 2 22:10:17.485219 kernel: kauditd_printk_skb: 55 callbacks suppressed Oct 2 22:10:17.485275 kernel: audit: type=1334 audit(1696284617.479:1442): prog-id=83 op=UNLOAD Oct 2 22:10:17.479000 audit: BPF prog-id=97 op=UNLOAD Oct 2 22:10:17.498418 kernel: audit: type=1334 audit(1696284617.479:1443): prog-id=97 op=UNLOAD Oct 2 22:10:17.511795 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7b59da32776b09c9785040b9f05bce75e28f3994a683c3d4970c31086b5b5207-rootfs.mount: Deactivated successfully. Oct 2 22:10:17.565092 env[1377]: time="2023-10-02T22:10:17.565038621Z" level=info msg="shim disconnected" id=7b59da32776b09c9785040b9f05bce75e28f3994a683c3d4970c31086b5b5207 Oct 2 22:10:17.565092 env[1377]: time="2023-10-02T22:10:17.565090980Z" level=warning msg="cleaning up after shim disconnected" id=7b59da32776b09c9785040b9f05bce75e28f3994a683c3d4970c31086b5b5207 namespace=k8s.io Oct 2 22:10:17.565092 env[1377]: time="2023-10-02T22:10:17.565101379Z" level=info msg="cleaning up dead shim" Oct 2 22:10:17.577786 env[1377]: time="2023-10-02T22:10:17.577726644Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:10:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3872 runtime=io.containerd.runc.v2\n" Oct 2 22:10:17.621919 kubelet[2531]: I1002 22:10:17.621524 2531 scope.go:115] "RemoveContainer" containerID="7b59da32776b09c9785040b9f05bce75e28f3994a683c3d4970c31086b5b5207" Oct 2 22:10:17.623059 env[1377]: time="2023-10-02T22:10:17.623018643Z" level=info msg="CreateContainer within sandbox \"523743e12d94a2facd1672fbd063bf1566fae13f09ed7b54399c9ef5c455382e\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 22:10:17.643278 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3192854994.mount: Deactivated successfully. Oct 2 22:10:17.647397 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1401835632.mount: Deactivated successfully. Oct 2 22:10:17.658252 env[1377]: time="2023-10-02T22:10:17.658207869Z" level=info msg="CreateContainer within sandbox \"523743e12d94a2facd1672fbd063bf1566fae13f09ed7b54399c9ef5c455382e\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"b7914c80de16711fd549dbc99c888e54b89c5342218e9734471203c882559341\"" Oct 2 22:10:17.658598 env[1377]: time="2023-10-02T22:10:17.658567779Z" level=info msg="StartContainer for \"b7914c80de16711fd549dbc99c888e54b89c5342218e9734471203c882559341\"" Oct 2 22:10:17.679146 systemd[1]: Started cri-containerd-b7914c80de16711fd549dbc99c888e54b89c5342218e9734471203c882559341.scope. Oct 2 22:10:17.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.734237 kernel: audit: type=1400 audit(1696284617.696:1444): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.734358 kernel: audit: type=1400 audit(1696284617.696:1445): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.770836 kernel: audit: type=1400 audit(1696284617.696:1446): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.770933 kernel: audit: type=1400 audit(1696284617.696:1447): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.790894 kernel: audit: type=1400 audit(1696284617.696:1448): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.811090 kernel: audit: type=1400 audit(1696284617.696:1449): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.828609 kernel: audit: type=1400 audit(1696284617.696:1450): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.846903 kernel: audit: type=1400 audit(1696284617.696:1451): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.696000 audit: BPF prog-id=140 op=LOAD Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2228 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:17.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237393134633830646531363731316664353439646263393963383838 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2228 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:17.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237393134633830646531363731316664353439646263393963383838 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit: BPF prog-id=141 op=LOAD Oct 2 22:10:17.715000 audit[3893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2228 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:17.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237393134633830646531363731316664353439646263393963383838 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit: BPF prog-id=142 op=LOAD Oct 2 22:10:17.715000 audit[3893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2228 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:17.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237393134633830646531363731316664353439646263393963383838 Oct 2 22:10:17.715000 audit: BPF prog-id=142 op=UNLOAD Oct 2 22:10:17.715000 audit: BPF prog-id=141 op=UNLOAD Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:17.715000 audit: BPF prog-id=143 op=LOAD Oct 2 22:10:17.715000 audit[3893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2228 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:17.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237393134633830646531363731316664353439646263393963383838 Oct 2 22:10:17.855574 env[1377]: time="2023-10-02T22:10:17.855513633Z" level=info msg="StartContainer for \"b7914c80de16711fd549dbc99c888e54b89c5342218e9734471203c882559341\" returns successfully" Oct 2 22:10:21.810798 kubelet[2531]: E1002 22:10:21.810750 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:26.811850 kubelet[2531]: E1002 22:10:26.811818 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:27.469511 kubelet[2531]: E1002 22:10:27.469464 2531 controller.go:189] failed to update lease, error: Put "https://10.200.20.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-02d4509438?timeout=10s": net/http: request canceled (Client.Timeout exceeded while awaiting headers) Oct 2 22:10:31.813019 kubelet[2531]: E1002 22:10:31.812983 2531 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"