Oct 2 22:00:43.058719 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Oct 2 22:00:43.058738 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 22:00:43.058746 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Oct 2 22:00:43.058753 kernel: printk: bootconsole [pl11] enabled Oct 2 22:00:43.058758 kernel: efi: EFI v2.70 by EDK II Oct 2 22:00:43.058764 kernel: efi: ACPI 2.0=0x3fd8d018 SMBIOS=0x3fd6a000 SMBIOS 3.0=0x3fd68000 MEMATTR=0x3ef3d098 RNG=0x3fd8d998 MEMRESERVE=0x37eb7f98 Oct 2 22:00:43.058770 kernel: random: crng init done Oct 2 22:00:43.058776 kernel: ACPI: Early table checksum verification disabled Oct 2 22:00:43.058781 kernel: ACPI: RSDP 0x000000003FD8D018 000024 (v02 VRTUAL) Oct 2 22:00:43.058786 kernel: ACPI: XSDT 0x000000003FD8DF18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:43.058792 kernel: ACPI: FACP 0x000000003FD8DC18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:43.058799 kernel: ACPI: DSDT 0x000000003EBD6018 01DEC0 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 22:00:43.058805 kernel: ACPI: DBG2 0x000000003FD8DB18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:43.058810 kernel: ACPI: GTDT 0x000000003FD8DD98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:43.058817 kernel: ACPI: OEM0 0x000000003FD8D098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:43.058823 kernel: ACPI: SPCR 0x000000003FD8DA98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:43.058829 kernel: ACPI: APIC 0x000000003FD8D818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:43.058836 kernel: ACPI: SRAT 0x000000003FD8D198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:43.058842 kernel: ACPI: PPTT 0x000000003FD8D418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Oct 2 22:00:43.058848 kernel: ACPI: BGRT 0x000000003FD8DE98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 22:00:43.058853 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Oct 2 22:00:43.058859 kernel: NUMA: Failed to initialise from firmware Oct 2 22:00:43.058865 kernel: NUMA: Faking a node at [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 22:00:43.058871 kernel: NUMA: NODE_DATA [mem 0x1bf7f1900-0x1bf7f6fff] Oct 2 22:00:43.058877 kernel: Zone ranges: Oct 2 22:00:43.058883 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Oct 2 22:00:43.058888 kernel: DMA32 empty Oct 2 22:00:43.058895 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 22:00:43.058901 kernel: Movable zone start for each node Oct 2 22:00:43.058907 kernel: Early memory node ranges Oct 2 22:00:43.058913 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Oct 2 22:00:43.058918 kernel: node 0: [mem 0x0000000000824000-0x000000003ec84fff] Oct 2 22:00:43.058924 kernel: node 0: [mem 0x000000003ec85000-0x000000003ecadfff] Oct 2 22:00:43.058930 kernel: node 0: [mem 0x000000003ecae000-0x000000003fd2dfff] Oct 2 22:00:43.058936 kernel: node 0: [mem 0x000000003fd2e000-0x000000003fd81fff] Oct 2 22:00:43.058941 kernel: node 0: [mem 0x000000003fd82000-0x000000003fd8dfff] Oct 2 22:00:43.058947 kernel: node 0: [mem 0x000000003fd8e000-0x000000003fd91fff] Oct 2 22:00:43.058952 kernel: node 0: [mem 0x000000003fd92000-0x000000003fffffff] Oct 2 22:00:43.058958 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Oct 2 22:00:43.058965 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Oct 2 22:00:43.058973 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Oct 2 22:00:43.058979 kernel: psci: probing for conduit method from ACPI. Oct 2 22:00:43.058985 kernel: psci: PSCIv1.1 detected in firmware. Oct 2 22:00:43.058991 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 22:00:43.058999 kernel: psci: MIGRATE_INFO_TYPE not supported. Oct 2 22:00:43.059005 kernel: psci: SMC Calling Convention v1.4 Oct 2 22:00:43.059011 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node -1 Oct 2 22:00:43.059017 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node -1 Oct 2 22:00:43.059023 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 22:00:43.059029 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 22:00:43.059035 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 22:00:43.059041 kernel: Detected PIPT I-cache on CPU0 Oct 2 22:00:43.059047 kernel: CPU features: detected: GIC system register CPU interface Oct 2 22:00:43.059053 kernel: CPU features: detected: Hardware dirty bit management Oct 2 22:00:43.059059 kernel: CPU features: detected: Spectre-BHB Oct 2 22:00:43.059065 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 22:00:43.059072 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 22:00:43.059078 kernel: CPU features: detected: ARM erratum 1418040 Oct 2 22:00:43.059084 kernel: CPU features: detected: ARM erratum 1542419 (kernel portion) Oct 2 22:00:43.059090 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1032156 Oct 2 22:00:43.059096 kernel: Policy zone: Normal Oct 2 22:00:43.059103 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 22:00:43.059110 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 22:00:43.059116 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 22:00:43.059122 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 22:00:43.059128 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 22:00:43.059135 kernel: software IO TLB: mapped [mem 0x000000003abd6000-0x000000003ebd6000] (64MB) Oct 2 22:00:43.059142 kernel: Memory: 3992060K/4194160K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 202100K reserved, 0K cma-reserved) Oct 2 22:00:43.059148 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 22:00:43.059154 kernel: trace event string verifier disabled Oct 2 22:00:43.059160 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 22:00:43.059167 kernel: rcu: RCU event tracing is enabled. Oct 2 22:00:43.059173 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 22:00:43.059179 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 22:00:43.059185 kernel: Tracing variant of Tasks RCU enabled. Oct 2 22:00:43.059191 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 22:00:43.059197 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 22:00:43.059204 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 22:00:43.059228 kernel: GICv3: 960 SPIs implemented Oct 2 22:00:43.059234 kernel: GICv3: 0 Extended SPIs implemented Oct 2 22:00:43.059240 kernel: GICv3: Distributor has no Range Selector support Oct 2 22:00:43.059246 kernel: Root IRQ handler: gic_handle_irq Oct 2 22:00:43.059252 kernel: GICv3: 16 PPIs implemented Oct 2 22:00:43.059258 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Oct 2 22:00:43.059264 kernel: ITS: No ITS available, not enabling LPIs Oct 2 22:00:43.059271 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 22:00:43.059277 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Oct 2 22:00:43.059283 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Oct 2 22:00:43.059289 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Oct 2 22:00:43.059298 kernel: Console: colour dummy device 80x25 Oct 2 22:00:43.059304 kernel: printk: console [tty1] enabled Oct 2 22:00:43.059310 kernel: ACPI: Core revision 20210730 Oct 2 22:00:43.059317 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Oct 2 22:00:43.059324 kernel: pid_max: default: 32768 minimum: 301 Oct 2 22:00:43.059330 kernel: LSM: Security Framework initializing Oct 2 22:00:43.059336 kernel: SELinux: Initializing. Oct 2 22:00:43.059342 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 22:00:43.059349 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 22:00:43.059356 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3a8030, hints 0xe, misc 0x31e1 Oct 2 22:00:43.059362 kernel: Hyper-V: Host Build 10.0.22477.1341-1-0 Oct 2 22:00:43.059369 kernel: rcu: Hierarchical SRCU implementation. Oct 2 22:00:43.059375 kernel: Remapping and enabling EFI services. Oct 2 22:00:43.059381 kernel: smp: Bringing up secondary CPUs ... Oct 2 22:00:43.059387 kernel: Detected PIPT I-cache on CPU1 Oct 2 22:00:43.059393 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Oct 2 22:00:43.059399 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Oct 2 22:00:43.059405 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Oct 2 22:00:43.059413 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 22:00:43.059419 kernel: SMP: Total of 2 processors activated. Oct 2 22:00:43.059425 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 22:00:43.059432 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Oct 2 22:00:43.059438 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Oct 2 22:00:43.059444 kernel: CPU features: detected: CRC32 instructions Oct 2 22:00:43.059451 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Oct 2 22:00:43.059457 kernel: CPU features: detected: LSE atomic instructions Oct 2 22:00:43.059463 kernel: CPU features: detected: Privileged Access Never Oct 2 22:00:43.059470 kernel: CPU: All CPU(s) started at EL1 Oct 2 22:00:43.059477 kernel: alternatives: patching kernel code Oct 2 22:00:43.059487 kernel: devtmpfs: initialized Oct 2 22:00:43.059495 kernel: KASLR enabled Oct 2 22:00:43.059502 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 22:00:43.059508 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 22:00:43.059515 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 22:00:43.059521 kernel: SMBIOS 3.1.0 present. Oct 2 22:00:43.059528 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/16/2022 Oct 2 22:00:43.059535 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 22:00:43.059542 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 22:00:43.059549 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 22:00:43.059556 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 22:00:43.059562 kernel: audit: initializing netlink subsys (disabled) Oct 2 22:00:43.059569 kernel: audit: type=2000 audit(0.086:1): state=initialized audit_enabled=0 res=1 Oct 2 22:00:43.059575 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 22:00:43.059582 kernel: cpuidle: using governor menu Oct 2 22:00:43.059590 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 22:00:43.059597 kernel: ASID allocator initialised with 32768 entries Oct 2 22:00:43.059603 kernel: ACPI: bus type PCI registered Oct 2 22:00:43.059610 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 22:00:43.059616 kernel: Serial: AMBA PL011 UART driver Oct 2 22:00:43.059623 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 22:00:43.059629 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 22:00:43.059636 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 22:00:43.059642 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 22:00:43.059650 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 22:00:43.059657 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 22:00:43.059663 kernel: ACPI: Added _OSI(Module Device) Oct 2 22:00:43.059670 kernel: ACPI: Added _OSI(Processor Device) Oct 2 22:00:43.059676 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 22:00:43.059683 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 22:00:43.059689 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 22:00:43.059696 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 22:00:43.059702 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 22:00:43.059710 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 22:00:43.059717 kernel: ACPI: Interpreter enabled Oct 2 22:00:43.059723 kernel: ACPI: Using GIC for interrupt routing Oct 2 22:00:43.059730 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Oct 2 22:00:43.059736 kernel: printk: console [ttyAMA0] enabled Oct 2 22:00:43.059743 kernel: printk: bootconsole [pl11] disabled Oct 2 22:00:43.059749 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Oct 2 22:00:43.059756 kernel: iommu: Default domain type: Translated Oct 2 22:00:43.059762 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 22:00:43.059770 kernel: vgaarb: loaded Oct 2 22:00:43.059776 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 22:00:43.059783 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 22:00:43.059790 kernel: PTP clock support registered Oct 2 22:00:43.059796 kernel: Registered efivars operations Oct 2 22:00:43.059803 kernel: No ACPI PMU IRQ for CPU0 Oct 2 22:00:43.059809 kernel: No ACPI PMU IRQ for CPU1 Oct 2 22:00:43.059815 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 22:00:43.059822 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 22:00:43.059829 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 22:00:43.059836 kernel: pnp: PnP ACPI init Oct 2 22:00:43.059842 kernel: pnp: PnP ACPI: found 0 devices Oct 2 22:00:43.059849 kernel: NET: Registered PF_INET protocol family Oct 2 22:00:43.059856 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 22:00:43.059862 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 22:00:43.059869 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 22:00:43.059876 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 22:00:43.059882 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 22:00:43.059891 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 22:00:43.059897 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 22:00:43.059904 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 22:00:43.059911 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 22:00:43.059917 kernel: PCI: CLS 0 bytes, default 64 Oct 2 22:00:43.059924 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 1 counters available Oct 2 22:00:43.059930 kernel: kvm [1]: HYP mode not available Oct 2 22:00:43.059937 kernel: Initialise system trusted keyrings Oct 2 22:00:43.059943 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 22:00:43.059951 kernel: Key type asymmetric registered Oct 2 22:00:43.059957 kernel: Asymmetric key parser 'x509' registered Oct 2 22:00:43.059964 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 22:00:43.059970 kernel: io scheduler mq-deadline registered Oct 2 22:00:43.059977 kernel: io scheduler kyber registered Oct 2 22:00:43.059984 kernel: io scheduler bfq registered Oct 2 22:00:43.059990 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 22:00:43.059996 kernel: thunder_xcv, ver 1.0 Oct 2 22:00:43.060003 kernel: thunder_bgx, ver 1.0 Oct 2 22:00:43.060010 kernel: nicpf, ver 1.0 Oct 2 22:00:43.060017 kernel: nicvf, ver 1.0 Oct 2 22:00:43.060185 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 22:00:43.060261 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T22:00:42 UTC (1696284042) Oct 2 22:00:43.060271 kernel: efifb: probing for efifb Oct 2 22:00:43.060278 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 22:00:43.060285 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 22:00:43.060291 kernel: efifb: scrolling: redraw Oct 2 22:00:43.060299 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 22:00:43.060306 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 22:00:43.060313 kernel: fb0: EFI VGA frame buffer device Oct 2 22:00:43.060319 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Oct 2 22:00:43.060326 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 22:00:43.060332 kernel: NET: Registered PF_INET6 protocol family Oct 2 22:00:43.060339 kernel: Segment Routing with IPv6 Oct 2 22:00:43.060346 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 22:00:43.060352 kernel: NET: Registered PF_PACKET protocol family Oct 2 22:00:43.060360 kernel: Key type dns_resolver registered Oct 2 22:00:43.060367 kernel: registered taskstats version 1 Oct 2 22:00:43.060373 kernel: Loading compiled-in X.509 certificates Oct 2 22:00:43.060380 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 22:00:43.060387 kernel: Key type .fscrypt registered Oct 2 22:00:43.060393 kernel: Key type fscrypt-provisioning registered Oct 2 22:00:43.060400 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 22:00:43.060407 kernel: ima: Allocated hash algorithm: sha1 Oct 2 22:00:43.060413 kernel: ima: No architecture policies found Oct 2 22:00:43.060421 kernel: Freeing unused kernel memory: 34560K Oct 2 22:00:43.060428 kernel: Run /init as init process Oct 2 22:00:43.060434 kernel: with arguments: Oct 2 22:00:43.060440 kernel: /init Oct 2 22:00:43.060447 kernel: with environment: Oct 2 22:00:43.060453 kernel: HOME=/ Oct 2 22:00:43.060459 kernel: TERM=linux Oct 2 22:00:43.060466 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 22:00:43.060475 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 22:00:43.060485 systemd[1]: Detected virtualization microsoft. Oct 2 22:00:43.060492 systemd[1]: Detected architecture arm64. Oct 2 22:00:43.060498 systemd[1]: Running in initrd. Oct 2 22:00:43.060505 systemd[1]: No hostname configured, using default hostname. Oct 2 22:00:43.060512 systemd[1]: Hostname set to . Oct 2 22:00:43.060520 systemd[1]: Initializing machine ID from random generator. Oct 2 22:00:43.060526 systemd[1]: Queued start job for default target initrd.target. Oct 2 22:00:43.060535 systemd[1]: Started systemd-ask-password-console.path. Oct 2 22:00:43.060542 systemd[1]: Reached target cryptsetup.target. Oct 2 22:00:43.060548 systemd[1]: Reached target paths.target. Oct 2 22:00:43.060555 systemd[1]: Reached target slices.target. Oct 2 22:00:43.060562 systemd[1]: Reached target swap.target. Oct 2 22:00:43.060569 systemd[1]: Reached target timers.target. Oct 2 22:00:43.060577 systemd[1]: Listening on iscsid.socket. Oct 2 22:00:43.060584 systemd[1]: Listening on iscsiuio.socket. Oct 2 22:00:43.060592 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 22:00:43.060599 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 22:00:43.060606 systemd[1]: Listening on systemd-journald.socket. Oct 2 22:00:43.060613 systemd[1]: Listening on systemd-networkd.socket. Oct 2 22:00:43.060620 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 22:00:43.060627 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 22:00:43.060634 systemd[1]: Reached target sockets.target. Oct 2 22:00:43.060641 systemd[1]: Starting kmod-static-nodes.service... Oct 2 22:00:43.060648 systemd[1]: Finished network-cleanup.service. Oct 2 22:00:43.060656 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 22:00:43.060663 systemd[1]: Starting systemd-journald.service... Oct 2 22:00:43.060670 systemd[1]: Starting systemd-modules-load.service... Oct 2 22:00:43.060677 systemd[1]: Starting systemd-resolved.service... Oct 2 22:00:43.060684 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 22:00:43.060695 systemd-journald[276]: Journal started Oct 2 22:00:43.060730 systemd-journald[276]: Runtime Journal (/run/log/journal/c57ae24fefd446c8a7012a633374bf04) is 8.0M, max 78.6M, 70.6M free. Oct 2 22:00:43.057086 systemd-modules-load[277]: Inserted module 'overlay' Oct 2 22:00:43.097709 systemd[1]: Started systemd-journald.service. Oct 2 22:00:43.097764 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 22:00:43.092849 systemd-resolved[278]: Positive Trust Anchors: Oct 2 22:00:43.136793 kernel: audit: type=1130 audit(1696284043.101:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.136817 kernel: Bridge firewalling registered Oct 2 22:00:43.136826 kernel: SCSI subsystem initialized Oct 2 22:00:43.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.092856 systemd-resolved[278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 22:00:43.163870 kernel: audit: type=1130 audit(1696284043.140:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.092884 systemd-resolved[278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 22:00:43.238914 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 22:00:43.238947 kernel: device-mapper: uevent: version 1.0.3 Oct 2 22:00:43.238960 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 22:00:43.238971 kernel: audit: type=1130 audit(1696284043.177:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.095763 systemd-resolved[278]: Defaulting to hostname 'linux'. Oct 2 22:00:43.277363 kernel: audit: type=1130 audit(1696284043.251:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.121511 systemd[1]: Started systemd-resolved.service. Oct 2 22:00:43.124770 systemd-modules-load[277]: Inserted module 'br_netfilter' Oct 2 22:00:43.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.141132 systemd[1]: Finished kmod-static-nodes.service. Oct 2 22:00:43.177839 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 22:00:43.337824 kernel: audit: type=1130 audit(1696284043.281:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.337846 kernel: audit: type=1130 audit(1696284043.307:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.210527 systemd-modules-load[277]: Inserted module 'dm_multipath' Oct 2 22:00:43.251643 systemd[1]: Finished systemd-modules-load.service. Oct 2 22:00:43.281863 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 22:00:43.308134 systemd[1]: Reached target nss-lookup.target. Oct 2 22:00:43.336474 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 22:00:43.347313 systemd[1]: Starting systemd-sysctl.service... Oct 2 22:00:43.371409 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 22:00:43.401000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.393287 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 22:00:43.426274 kernel: audit: type=1130 audit(1696284043.401:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.422480 systemd[1]: Finished systemd-sysctl.service. Oct 2 22:00:43.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.430762 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 22:00:43.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.460484 systemd[1]: Starting dracut-cmdline.service... Oct 2 22:00:43.485458 kernel: audit: type=1130 audit(1696284043.430:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.485481 kernel: audit: type=1130 audit(1696284043.455:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.492528 dracut-cmdline[298]: dracut-dracut-053 Oct 2 22:00:43.499660 dracut-cmdline[298]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 22:00:43.619233 kernel: Loading iSCSI transport class v2.0-870. Oct 2 22:00:43.630220 kernel: iscsi: registered transport (tcp) Oct 2 22:00:43.651322 kernel: iscsi: registered transport (qla4xxx) Oct 2 22:00:43.651399 kernel: QLogic iSCSI HBA Driver Oct 2 22:00:43.724483 systemd[1]: Finished dracut-cmdline.service. Oct 2 22:00:43.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:43.729708 systemd[1]: Starting dracut-pre-udev.service... Oct 2 22:00:43.791228 kernel: raid6: neonx8 gen() 13823 MB/s Oct 2 22:00:43.811229 kernel: raid6: neonx8 xor() 10839 MB/s Oct 2 22:00:43.831217 kernel: raid6: neonx4 gen() 13504 MB/s Oct 2 22:00:43.852216 kernel: raid6: neonx4 xor() 11129 MB/s Oct 2 22:00:43.872217 kernel: raid6: neonx2 gen() 12958 MB/s Oct 2 22:00:43.892216 kernel: raid6: neonx2 xor() 10240 MB/s Oct 2 22:00:43.913217 kernel: raid6: neonx1 gen() 10470 MB/s Oct 2 22:00:43.949213 kernel: raid6: neonx1 xor() 8765 MB/s Oct 2 22:00:43.960229 kernel: raid6: int64x8 gen() 6297 MB/s Oct 2 22:00:43.974220 kernel: raid6: int64x8 xor() 3549 MB/s Oct 2 22:00:43.994216 kernel: raid6: int64x4 gen() 7242 MB/s Oct 2 22:00:44.014216 kernel: raid6: int64x4 xor() 3853 MB/s Oct 2 22:00:44.035217 kernel: raid6: int64x2 gen() 6150 MB/s Oct 2 22:00:44.055215 kernel: raid6: int64x2 xor() 3322 MB/s Oct 2 22:00:44.075216 kernel: raid6: int64x1 gen() 5052 MB/s Oct 2 22:00:44.100383 kernel: raid6: int64x1 xor() 2647 MB/s Oct 2 22:00:44.100405 kernel: raid6: using algorithm neonx8 gen() 13823 MB/s Oct 2 22:00:44.100421 kernel: raid6: .... xor() 10839 MB/s, rmw enabled Oct 2 22:00:44.104421 kernel: raid6: using neon recovery algorithm Oct 2 22:00:44.125576 kernel: xor: measuring software checksum speed Oct 2 22:00:44.125589 kernel: 8regs : 17300 MB/sec Oct 2 22:00:44.129823 kernel: 32regs : 20749 MB/sec Oct 2 22:00:44.133731 kernel: arm64_neon : 27854 MB/sec Oct 2 22:00:44.133741 kernel: xor: using function: arm64_neon (27854 MB/sec) Oct 2 22:00:44.193221 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 22:00:44.210902 systemd[1]: Finished dracut-pre-udev.service. Oct 2 22:00:44.215000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:44.220000 audit: BPF prog-id=7 op=LOAD Oct 2 22:00:44.220000 audit: BPF prog-id=8 op=LOAD Oct 2 22:00:44.221441 systemd[1]: Starting systemd-udevd.service... Oct 2 22:00:44.241679 systemd-udevd[475]: Using default interface naming scheme 'v252'. Oct 2 22:00:44.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:44.249397 systemd[1]: Started systemd-udevd.service. Oct 2 22:00:44.258932 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 22:00:44.287928 dracut-pre-trigger[496]: rd.md=0: removing MD RAID activation Oct 2 22:00:44.341567 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 22:00:44.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:44.347395 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 22:00:44.389451 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 22:00:44.402000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:44.457510 kernel: hv_vmbus: Vmbus version:5.3 Oct 2 22:00:44.473238 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 22:00:44.473292 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 22:00:44.475231 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 22:00:44.498423 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 22:00:44.498475 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 22:00:44.509039 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 22:00:44.516232 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 22:00:44.523081 kernel: scsi host0: storvsc_host_t Oct 2 22:00:44.523253 kernel: scsi host1: storvsc_host_t Oct 2 22:00:44.523278 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 22:00:44.536541 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 22:00:44.557036 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 22:00:44.557238 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 22:00:44.559226 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 22:00:44.572301 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 22:00:44.572478 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 22:00:44.577224 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 22:00:44.577373 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 22:00:44.584222 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 22:00:44.592223 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 22:00:44.597672 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 22:00:44.652891 kernel: hv_netvsc 002248b3-c49b-0022-48b3-c49b002248b3 eth0: VF slot 1 added Oct 2 22:00:44.662748 kernel: hv_vmbus: registering driver hv_pci Oct 2 22:00:44.876307 kernel: hv_pci f1084f74-5755-4778-ac9b-54e7a291595a: PCI VMBus probing: Using version 0x10004 Oct 2 22:00:44.889801 kernel: hv_pci f1084f74-5755-4778-ac9b-54e7a291595a: PCI host bridge to bus 5755:00 Oct 2 22:00:44.889916 kernel: pci_bus 5755:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Oct 2 22:00:44.890007 kernel: pci_bus 5755:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 22:00:44.903239 kernel: pci 5755:00:02.0: [15b3:1018] type 00 class 0x020000 Oct 2 22:00:44.915387 kernel: pci 5755:00:02.0: reg 0x10: [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 22:00:44.937259 kernel: pci 5755:00:02.0: enabling Extended Tags Oct 2 22:00:44.955289 kernel: pci 5755:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 5755:00:02.0 (capable of 126.016 Gb/s with 8.0 GT/s PCIe x16 link) Oct 2 22:00:44.967523 kernel: pci_bus 5755:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 22:00:44.967698 kernel: pci 5755:00:02.0: BAR 0: assigned [mem 0xfc0000000-0xfc00fffff 64bit pref] Oct 2 22:00:45.007236 kernel: mlx5_core 5755:00:02.0: firmware version: 16.31.2424 Oct 2 22:00:45.185233 kernel: mlx5_core 5755:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0) Oct 2 22:00:45.219819 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 22:00:45.331511 kernel: hv_netvsc 002248b3-c49b-0022-48b3-c49b002248b3 eth0: VF registering: eth1 Oct 2 22:00:45.331688 kernel: mlx5_core 5755:00:02.0 eth1: joined to eth0 Oct 2 22:00:45.345234 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (528) Oct 2 22:00:45.351252 kernel: mlx5_core 5755:00:02.0 enP22357s1: renamed from eth1 Oct 2 22:00:45.368339 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 22:00:45.467404 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 22:00:45.474298 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 22:00:45.501896 systemd[1]: Starting disk-uuid.service... Oct 2 22:00:45.536521 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 22:00:46.528867 disk-uuid[599]: The operation has completed successfully. Oct 2 22:00:46.533900 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 22:00:46.612474 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 22:00:46.616432 systemd[1]: Finished disk-uuid.service. Oct 2 22:00:46.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:46.621000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:46.622115 systemd[1]: Starting verity-setup.service... Oct 2 22:00:46.673481 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 22:00:47.022873 systemd[1]: Found device dev-mapper-usr.device. Oct 2 22:00:47.028855 systemd[1]: Mounting sysusr-usr.mount... Oct 2 22:00:47.041135 systemd[1]: Finished verity-setup.service. Oct 2 22:00:47.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.054682 kernel: kauditd_printk_skb: 9 callbacks suppressed Oct 2 22:00:47.054728 kernel: audit: type=1130 audit(1696284047.045:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.120261 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 22:00:47.120380 systemd[1]: Mounted sysusr-usr.mount. Oct 2 22:00:47.124262 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 22:00:47.124975 systemd[1]: Starting ignition-setup.service... Oct 2 22:00:47.133066 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 22:00:47.175957 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 22:00:47.176016 kernel: BTRFS info (device sda6): using free space tree Oct 2 22:00:47.180599 kernel: BTRFS info (device sda6): has skinny extents Oct 2 22:00:47.288962 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 22:00:47.320938 kernel: audit: type=1130 audit(1696284047.293:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.320964 kernel: audit: type=1334 audit(1696284047.297:22): prog-id=9 op=LOAD Oct 2 22:00:47.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.297000 audit: BPF prog-id=9 op=LOAD Oct 2 22:00:47.298543 systemd[1]: Starting systemd-networkd.service... Oct 2 22:00:47.325792 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 22:00:47.349933 systemd-networkd[846]: lo: Link UP Oct 2 22:00:47.351253 systemd-networkd[846]: lo: Gained carrier Oct 2 22:00:47.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.351775 systemd-networkd[846]: Enumeration completed Oct 2 22:00:47.390602 kernel: audit: type=1130 audit(1696284047.358:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.353603 systemd[1]: Started systemd-networkd.service. Oct 2 22:00:47.394000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.354036 systemd-networkd[846]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 22:00:47.445239 kernel: audit: type=1130 audit(1696284047.394:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.445265 kernel: audit: type=1130 audit(1696284047.429:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.445323 iscsid[852]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 22:00:47.445323 iscsid[852]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 22:00:47.445323 iscsid[852]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 22:00:47.445323 iscsid[852]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 22:00:47.445323 iscsid[852]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 22:00:47.445323 iscsid[852]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 22:00:47.445323 iscsid[852]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 22:00:47.595286 kernel: audit: type=1130 audit(1696284047.515:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.595315 kernel: mlx5_core 5755:00:02.0 enP22357s1: Link up Oct 2 22:00:47.595475 kernel: audit: type=1130 audit(1696284047.543:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.376735 systemd[1]: Reached target network.target. Oct 2 22:00:47.383152 systemd[1]: Starting iscsiuio.service... Oct 2 22:00:47.390499 systemd[1]: Started iscsiuio.service. Oct 2 22:00:47.653285 kernel: hv_netvsc 002248b3-c49b-0022-48b3-c49b002248b3 eth0: Data path switched to VF: enP22357s1 Oct 2 22:00:47.653469 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 22:00:47.653481 kernel: audit: type=1130 audit(1696284047.633:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:47.398119 systemd[1]: Starting iscsid.service... Oct 2 22:00:47.426101 systemd[1]: Started iscsid.service. Oct 2 22:00:47.445703 systemd[1]: Starting dracut-initqueue.service... Oct 2 22:00:47.509998 systemd[1]: Finished ignition-setup.service. Oct 2 22:00:47.515678 systemd[1]: Finished dracut-initqueue.service. Oct 2 22:00:47.543964 systemd[1]: Reached target remote-fs-pre.target. Oct 2 22:00:47.570640 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 22:00:47.575699 systemd[1]: Reached target remote-fs.target. Oct 2 22:00:47.588902 systemd[1]: Starting dracut-pre-mount.service... Oct 2 22:00:47.601013 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 22:00:47.618522 systemd[1]: Finished dracut-pre-mount.service. Oct 2 22:00:47.630680 systemd-networkd[846]: enP22357s1: Link UP Oct 2 22:00:47.630751 systemd-networkd[846]: eth0: Link UP Oct 2 22:00:47.655966 systemd-networkd[846]: eth0: Gained carrier Oct 2 22:00:47.671610 systemd-networkd[846]: enP22357s1: Gained carrier Oct 2 22:00:47.690275 systemd-networkd[846]: eth0: DHCPv4 address 10.200.20.17/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 22:00:49.106332 systemd-networkd[846]: eth0: Gained IPv6LL Oct 2 22:00:51.253556 ignition[864]: Ignition 2.14.0 Oct 2 22:00:51.253567 ignition[864]: Stage: fetch-offline Oct 2 22:00:51.253619 ignition[864]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 22:00:51.253644 ignition[864]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 22:00:51.377479 ignition[864]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 22:00:51.377620 ignition[864]: parsed url from cmdline: "" Oct 2 22:00:51.384956 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 22:00:51.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:51.377623 ignition[864]: no config URL provided Oct 2 22:00:51.418954 kernel: audit: type=1130 audit(1696284051.390:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:51.391133 systemd[1]: Starting ignition-fetch.service... Oct 2 22:00:51.377628 ignition[864]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 22:00:51.377635 ignition[864]: no config at "/usr/lib/ignition/user.ign" Oct 2 22:00:51.377641 ignition[864]: failed to fetch config: resource requires networking Oct 2 22:00:51.384061 ignition[864]: Ignition finished successfully Oct 2 22:00:51.406756 ignition[874]: Ignition 2.14.0 Oct 2 22:00:51.406761 ignition[874]: Stage: fetch Oct 2 22:00:51.406856 ignition[874]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 22:00:51.406873 ignition[874]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 22:00:51.409478 ignition[874]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 22:00:51.409593 ignition[874]: parsed url from cmdline: "" Oct 2 22:00:51.409597 ignition[874]: no config URL provided Oct 2 22:00:51.409602 ignition[874]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 22:00:51.409617 ignition[874]: no config at "/usr/lib/ignition/user.ign" Oct 2 22:00:51.409642 ignition[874]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 22:00:51.443791 ignition[874]: GET result: OK Oct 2 22:00:51.443817 ignition[874]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 22:00:51.530067 ignition[874]: opening config device: "/dev/sr0" Oct 2 22:00:51.530923 ignition[874]: getting drive status for "/dev/sr0" Oct 2 22:00:51.530986 ignition[874]: drive status: OK Oct 2 22:00:51.531021 ignition[874]: mounting config device Oct 2 22:00:51.531030 ignition[874]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure3212395413" Oct 2 22:00:51.556236 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 22:00:51.556066 ignition[874]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure3212395413" Oct 2 22:00:51.556076 ignition[874]: checking for config drive Oct 2 22:00:51.563168 ignition[874]: reading config Oct 2 22:00:51.563750 ignition[874]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure3212395413" Oct 2 22:00:51.570470 ignition[874]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure3212395413" Oct 2 22:00:51.564062 systemd[1]: tmp-ignition\x2dazure3212395413.mount: Deactivated successfully. Oct 2 22:00:51.570485 ignition[874]: config has been read from custom data Oct 2 22:00:51.570557 ignition[874]: parsing config with SHA512: 00026f577764a02d083506b23a70f4737812a3eca2427fa0a2bdf9d0e1473c0a34a72ef4f7cb7eee5d927d106708fed24fffe6596995d9aeb45bae2a672f138f Oct 2 22:00:51.601243 unknown[874]: fetched base config from "system" Oct 2 22:00:51.606065 unknown[874]: fetched base config from "system" Oct 2 22:00:51.606073 unknown[874]: fetched user config from "azure" Oct 2 22:00:51.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:51.606743 ignition[874]: fetch: fetch complete Oct 2 22:00:51.608174 systemd[1]: Finished ignition-fetch.service. Oct 2 22:00:51.606748 ignition[874]: fetch: fetch passed Oct 2 22:00:51.616176 systemd[1]: Starting ignition-kargs.service... Oct 2 22:00:51.606800 ignition[874]: Ignition finished successfully Oct 2 22:00:51.639886 ignition[882]: Ignition 2.14.0 Oct 2 22:00:51.639892 ignition[882]: Stage: kargs Oct 2 22:00:51.639996 ignition[882]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 22:00:51.640012 ignition[882]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 22:00:51.663476 ignition[882]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 22:00:51.664829 ignition[882]: kargs: kargs passed Oct 2 22:00:51.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:51.670533 systemd[1]: Finished ignition-kargs.service. Oct 2 22:00:51.664878 ignition[882]: Ignition finished successfully Oct 2 22:00:51.675848 systemd[1]: Starting ignition-disks.service... Oct 2 22:00:51.694719 ignition[888]: Ignition 2.14.0 Oct 2 22:00:51.694725 ignition[888]: Stage: disks Oct 2 22:00:51.694834 ignition[888]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 22:00:51.694851 ignition[888]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 22:00:51.703741 systemd[1]: Finished ignition-disks.service. Oct 2 22:00:51.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:51.697907 ignition[888]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 22:00:51.713664 systemd[1]: Reached target initrd-root-device.target. Oct 2 22:00:51.702823 ignition[888]: disks: disks passed Oct 2 22:00:51.722065 systemd[1]: Reached target local-fs-pre.target. Oct 2 22:00:51.702873 ignition[888]: Ignition finished successfully Oct 2 22:00:51.732345 systemd[1]: Reached target local-fs.target. Oct 2 22:00:51.741520 systemd[1]: Reached target sysinit.target. Oct 2 22:00:51.749482 systemd[1]: Reached target basic.target. Oct 2 22:00:51.758763 systemd[1]: Starting systemd-fsck-root.service... Oct 2 22:00:51.844561 systemd-fsck[896]: ROOT: clean, 603/7326000 files, 481067/7359488 blocks Oct 2 22:00:51.853767 systemd[1]: Finished systemd-fsck-root.service. Oct 2 22:00:51.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:51.859676 systemd[1]: Mounting sysroot.mount... Oct 2 22:00:51.899227 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 22:00:51.899576 systemd[1]: Mounted sysroot.mount. Oct 2 22:00:51.903573 systemd[1]: Reached target initrd-root-fs.target. Oct 2 22:00:51.973945 systemd[1]: Mounting sysroot-usr.mount... Oct 2 22:00:51.978572 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 22:00:51.983516 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 22:00:51.983553 systemd[1]: Reached target ignition-diskful.target. Oct 2 22:00:51.994145 systemd[1]: Mounted sysroot-usr.mount. Oct 2 22:00:52.037475 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 22:00:52.042629 systemd[1]: Starting initrd-setup-root.service... Oct 2 22:00:52.069232 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (906) Oct 2 22:00:52.080579 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 22:00:52.080609 kernel: BTRFS info (device sda6): using free space tree Oct 2 22:00:52.085278 kernel: BTRFS info (device sda6): has skinny extents Oct 2 22:00:52.085304 initrd-setup-root[911]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 22:00:52.098473 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 22:00:52.133539 initrd-setup-root[937]: cut: /sysroot/etc/group: No such file or directory Oct 2 22:00:52.148111 initrd-setup-root[945]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 22:00:52.162611 initrd-setup-root[953]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 22:00:53.084140 systemd[1]: Finished initrd-setup-root.service. Oct 2 22:00:53.116328 kernel: kauditd_printk_skb: 4 callbacks suppressed Oct 2 22:00:53.116349 kernel: audit: type=1130 audit(1696284053.088:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.089282 systemd[1]: Starting ignition-mount.service... Oct 2 22:00:53.120891 systemd[1]: Starting sysroot-boot.service... Oct 2 22:00:53.133440 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 22:00:53.133553 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 22:00:53.159788 ignition[973]: INFO : Ignition 2.14.0 Oct 2 22:00:53.164531 ignition[973]: INFO : Stage: mount Oct 2 22:00:53.169752 ignition[973]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 22:00:53.169752 ignition[973]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 22:00:53.224484 kernel: audit: type=1130 audit(1696284053.173:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.224507 kernel: audit: type=1130 audit(1696284053.198:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.198000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.169478 systemd[1]: Finished sysroot-boot.service. Oct 2 22:00:53.229933 ignition[973]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 22:00:53.229933 ignition[973]: INFO : mount: mount passed Oct 2 22:00:53.229933 ignition[973]: INFO : Ignition finished successfully Oct 2 22:00:53.191294 systemd[1]: Finished ignition-mount.service. Oct 2 22:00:53.501920 coreos-metadata[905]: Oct 02 22:00:53.501 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 22:00:53.509908 coreos-metadata[905]: Oct 02 22:00:53.504 INFO Fetch successful Oct 2 22:00:53.542410 coreos-metadata[905]: Oct 02 22:00:53.542 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 22:00:53.554727 coreos-metadata[905]: Oct 02 22:00:53.554 INFO Fetch successful Oct 2 22:00:53.560390 coreos-metadata[905]: Oct 02 22:00:53.560 INFO wrote hostname ci-3510.3.0-a-176754823f to /sysroot/etc/hostname Oct 2 22:00:53.562436 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 22:00:53.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.601109 kernel: audit: type=1130 audit(1696284053.572:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:53.593291 systemd[1]: Starting ignition-files.service... Oct 2 22:00:53.606593 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 22:00:53.634619 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (984) Oct 2 22:00:53.634672 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Oct 2 22:00:53.634683 kernel: BTRFS info (device sda6): using free space tree Oct 2 22:00:53.646306 kernel: BTRFS info (device sda6): has skinny extents Oct 2 22:00:53.653459 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 22:00:53.676239 ignition[1003]: INFO : Ignition 2.14.0 Oct 2 22:00:53.682236 ignition[1003]: INFO : Stage: files Oct 2 22:00:53.682236 ignition[1003]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 22:00:53.682236 ignition[1003]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 22:00:53.707726 ignition[1003]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 22:00:53.714369 ignition[1003]: DEBUG : files: compiled without relabeling support, skipping Oct 2 22:00:53.726784 ignition[1003]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 22:00:53.734516 ignition[1003]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 22:00:53.814156 ignition[1003]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 22:00:53.821853 ignition[1003]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 22:00:53.838370 unknown[1003]: wrote ssh authorized keys file for user: core Oct 2 22:00:53.843984 ignition[1003]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 22:00:53.854250 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 22:00:53.865626 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Oct 2 22:00:54.008553 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 22:00:54.282627 ignition[1003]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Oct 2 22:00:54.299693 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Oct 2 22:00:54.299693 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 22:00:54.299693 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Oct 2 22:00:54.373482 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 22:00:54.510556 ignition[1003]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Oct 2 22:00:54.528159 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Oct 2 22:00:54.528159 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 22:00:54.528159 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubeadm: attempt #1 Oct 2 22:00:54.607552 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 22:00:55.004227 kernel: mlx5_core 5755:00:02.0: poll_health:739:(pid 0): device's health compromised - reached miss count Oct 2 22:00:55.388826 ignition[1003]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 45b3100984c979ba0f1c0df8f4211474c2d75ebe916e677dff5fc8e3b3697cf7a953da94e356f39684cc860dff6878b772b7514c55651c2f866d9efeef23f970 Oct 2 22:00:55.407533 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 22:00:55.407533 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 22:00:55.407533 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubelet: attempt #1 Oct 2 22:00:55.439003 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 22:00:57.026129 ignition[1003]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 71857ff499ae135fa478e1827a0ed8865e578a8d2b1e25876e914fd0beba03733801c0654bcd4c0567bafeb16887dafb2dbbe8d1116e6ea28dcd8366c142d348 Oct 2 22:00:57.042409 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 22:00:57.042409 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 22:00:57.042409 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/arm64/kubectl: attempt #1 Oct 2 22:00:57.083846 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 22:00:57.957944 ignition[1003]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 14be61ec35669a27acf2df0380afb85b9b42311d50ca1165718421c5f605df1119ec9ae314696a674051712e80deeaa65e62d2d62ed4d107fe99d0aaf419dafc Oct 2 22:00:57.973944 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 22:00:57.973944 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 22:00:57.993104 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 22:00:57.993104 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 22:00:57.993104 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 22:00:58.057526 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 22:00:58.106690 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 22:00:58.116823 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 22:00:58.116823 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 22:00:58.116823 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 22:00:58.116823 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 22:00:58.116823 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 22:00:58.116823 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 22:00:58.192617 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (1006) Oct 2 22:00:58.150671 systemd[1]: mnt-oem701909400.mount: Deactivated successfully. Oct 2 22:00:58.197698 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem701909400" Oct 2 22:00:58.197698 ignition[1003]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem701909400": device or resource busy Oct 2 22:00:58.197698 ignition[1003]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem701909400", trying btrfs: device or resource busy Oct 2 22:00:58.197698 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem701909400" Oct 2 22:00:58.197698 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem701909400" Oct 2 22:00:58.197698 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem701909400" Oct 2 22:00:58.197698 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem701909400" Oct 2 22:00:58.197698 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 22:00:58.197698 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 22:00:58.197698 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 22:00:58.197698 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1851041760" Oct 2 22:00:58.197698 ignition[1003]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1851041760": device or resource busy Oct 2 22:00:58.197698 ignition[1003]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1851041760", trying btrfs: device or resource busy Oct 2 22:00:58.197698 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1851041760" Oct 2 22:00:58.514290 kernel: audit: type=1130 audit(1696284058.201:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.514322 kernel: audit: type=1130 audit(1696284058.269:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.514335 kernel: audit: type=1131 audit(1696284058.269:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.514346 kernel: audit: type=1130 audit(1696284058.330:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.514356 kernel: audit: type=1130 audit(1696284058.417:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.514365 kernel: audit: type=1131 audit(1696284058.447:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.269000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.447000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.182823 systemd[1]: mnt-oem1851041760.mount: Deactivated successfully. Oct 2 22:00:58.519515 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1851041760" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem1851041760" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem1851041760" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(1a): [started] setting preset to enabled for "waagent.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(1a): [finished] setting preset to enabled for "waagent.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(1b): [started] setting preset to enabled for "nvidia.service" Oct 2 22:00:58.519515 ignition[1003]: INFO : files: op(1b): [finished] setting preset to enabled for "nvidia.service" Oct 2 22:00:58.788360 kernel: audit: type=1130 audit(1696284058.534:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.788388 kernel: audit: type=1131 audit(1696284058.636:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.195469 systemd[1]: Finished ignition-files.service. Oct 2 22:00:58.796563 ignition[1003]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 22:00:58.796563 ignition[1003]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 22:00:58.796563 ignition[1003]: INFO : files: op(1d): [started] setting preset to enabled for "prepare-critools.service" Oct 2 22:00:58.796563 ignition[1003]: INFO : files: op(1d): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 22:00:58.796563 ignition[1003]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 22:00:58.796563 ignition[1003]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 22:00:58.796563 ignition[1003]: INFO : files: files passed Oct 2 22:00:58.796563 ignition[1003]: INFO : Ignition finished successfully Oct 2 22:00:58.917105 kernel: audit: type=1131 audit(1696284058.812:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.917132 kernel: audit: type=1131 audit(1696284058.862:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.862000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.911000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.203004 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 22:00:58.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.928867 initrd-setup-root-after-ignition[1028]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 22:00:58.233565 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 22:00:58.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.237971 systemd[1]: Starting ignition-quench.service... Oct 2 22:00:58.265437 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 22:00:58.265537 systemd[1]: Finished ignition-quench.service. Oct 2 22:00:58.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.989000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.294690 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 22:00:58.997000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.330411 systemd[1]: Reached target ignition-complete.target. Oct 2 22:00:59.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:59.006000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.364678 systemd[1]: Starting initrd-parse-etc.service... Oct 2 22:00:59.015000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:59.019368 ignition[1041]: INFO : Ignition 2.14.0 Oct 2 22:00:59.019368 ignition[1041]: INFO : Stage: umount Oct 2 22:00:59.019368 ignition[1041]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 22:00:59.019368 ignition[1041]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 22:00:59.019368 ignition[1041]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 22:00:59.019368 ignition[1041]: INFO : umount: umount passed Oct 2 22:00:59.019368 ignition[1041]: INFO : Ignition finished successfully Oct 2 22:00:59.023000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:59.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:59.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.406180 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 22:00:58.406343 systemd[1]: Finished initrd-parse-etc.service. Oct 2 22:00:58.448144 systemd[1]: Reached target initrd-fs.target. Oct 2 22:00:58.479788 systemd[1]: Reached target initrd.target. Oct 2 22:00:58.499395 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 22:00:59.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.500246 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 22:00:58.530449 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 22:00:58.569054 systemd[1]: Starting initrd-cleanup.service... Oct 2 22:00:58.593249 systemd[1]: Stopped target nss-lookup.target. Oct 2 22:00:59.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.603048 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 22:00:59.168000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.614678 systemd[1]: Stopped target timers.target. Oct 2 22:00:59.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:59.177000 audit: BPF prog-id=6 op=UNLOAD Oct 2 22:00:58.625189 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 22:00:58.625375 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 22:00:59.194000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.664315 systemd[1]: Stopped target initrd.target. Oct 2 22:00:59.207000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.679147 systemd[1]: Stopped target basic.target. Oct 2 22:00:59.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.692197 systemd[1]: Stopped target ignition-complete.target. Oct 2 22:00:59.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.703743 systemd[1]: Stopped target ignition-diskful.target. Oct 2 22:00:58.719307 systemd[1]: Stopped target initrd-root-device.target. Oct 2 22:00:59.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.734907 systemd[1]: Stopped target remote-fs.target. Oct 2 22:00:58.747036 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 22:00:59.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.759061 systemd[1]: Stopped target sysinit.target. Oct 2 22:00:59.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.770369 systemd[1]: Stopped target local-fs.target. Oct 2 22:00:59.279000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.781530 systemd[1]: Stopped target local-fs-pre.target. Oct 2 22:00:58.792794 systemd[1]: Stopped target swap.target. Oct 2 22:00:58.800535 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 22:00:58.800696 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 22:00:59.307000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:59.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:59.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:58.837885 systemd[1]: Stopped target cryptsetup.target. Oct 2 22:00:58.849814 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 22:00:58.849977 systemd[1]: Stopped dracut-initqueue.service. Oct 2 22:00:58.887435 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 22:00:58.887616 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 22:00:58.903306 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 22:00:58.903453 systemd[1]: Stopped ignition-files.service. Oct 2 22:00:58.912074 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 22:00:58.912238 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 22:00:58.927509 systemd[1]: Stopping ignition-mount.service... Oct 2 22:00:59.373949 kernel: hv_netvsc 002248b3-c49b-0022-48b3-c49b002248b3 eth0: Data path switched from VF: enP22357s1 Oct 2 22:00:58.944258 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 22:00:58.944549 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 22:00:58.950432 systemd[1]: Stopping sysroot-boot.service... Oct 2 22:00:58.967838 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 22:00:58.968041 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 22:00:58.984321 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 22:00:58.984460 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 22:00:58.992167 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 22:00:58.992278 systemd[1]: Stopped ignition-mount.service. Oct 2 22:00:58.999469 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 22:00:58.999545 systemd[1]: Finished initrd-cleanup.service. Oct 2 22:00:59.008041 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 22:00:59.008093 systemd[1]: Stopped ignition-disks.service. Oct 2 22:00:59.015332 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 22:00:59.015369 systemd[1]: Stopped ignition-kargs.service. Oct 2 22:00:59.023337 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 22:00:59.023369 systemd[1]: Stopped ignition-fetch.service. Oct 2 22:00:59.030848 systemd[1]: Stopped target network.target. Oct 2 22:00:59.038267 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 22:00:59.038315 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 22:00:59.050015 systemd[1]: Stopped target paths.target. Oct 2 22:00:59.065897 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 22:00:59.076245 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 22:00:59.081475 systemd[1]: Stopped target slices.target. Oct 2 22:00:59.090385 systemd[1]: Stopped target sockets.target. Oct 2 22:00:59.099751 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 22:00:59.099782 systemd[1]: Closed iscsid.socket. Oct 2 22:00:59.107263 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 22:00:59.107290 systemd[1]: Closed iscsiuio.socket. Oct 2 22:00:59.502000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:00:59.114572 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 22:00:59.114614 systemd[1]: Stopped ignition-setup.service. Oct 2 22:00:59.122128 systemd[1]: Stopping systemd-networkd.service... Oct 2 22:00:59.133630 systemd[1]: Stopping systemd-resolved.service... Oct 2 22:00:59.145255 systemd-networkd[846]: eth0: DHCPv6 lease lost Oct 2 22:00:59.538000 audit: BPF prog-id=9 op=UNLOAD Oct 2 22:00:59.153455 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 22:00:59.153969 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 22:00:59.154060 systemd[1]: Stopped systemd-resolved.service. Oct 2 22:00:59.161527 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 22:00:59.161617 systemd[1]: Stopped systemd-networkd.service. Oct 2 22:00:59.169546 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 22:00:59.169621 systemd[1]: Stopped sysroot-boot.service. Oct 2 22:00:59.581570 systemd-journald[276]: Received SIGTERM from PID 1 (n/a). Oct 2 22:00:59.581601 iscsid[852]: iscsid shutting down. Oct 2 22:00:59.177986 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 22:00:59.178024 systemd[1]: Closed systemd-networkd.socket. Oct 2 22:00:59.185315 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 22:00:59.185357 systemd[1]: Stopped initrd-setup-root.service. Oct 2 22:00:59.195070 systemd[1]: Stopping network-cleanup.service... Oct 2 22:00:59.203041 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 22:00:59.203094 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 22:00:59.207900 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 22:00:59.207953 systemd[1]: Stopped systemd-sysctl.service. Oct 2 22:00:59.219066 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 22:00:59.219104 systemd[1]: Stopped systemd-modules-load.service. Oct 2 22:00:59.223942 systemd[1]: Stopping systemd-udevd.service... Oct 2 22:00:59.233735 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 22:00:59.234343 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 22:00:59.234465 systemd[1]: Stopped systemd-udevd.service. Oct 2 22:00:59.241444 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 22:00:59.241483 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 22:00:59.250640 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 22:00:59.250672 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 22:00:59.255127 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 22:00:59.255178 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 22:00:59.263388 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 22:00:59.263433 systemd[1]: Stopped dracut-cmdline.service. Oct 2 22:00:59.271915 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 22:00:59.271961 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 22:00:59.283430 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 22:00:59.298454 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 22:00:59.298527 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 22:00:59.308039 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 22:00:59.308131 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 22:00:59.494436 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 22:00:59.494545 systemd[1]: Stopped network-cleanup.service. Oct 2 22:00:59.502768 systemd[1]: Reached target initrd-switch-root.target. Oct 2 22:00:59.511345 systemd[1]: Starting initrd-switch-root.service... Oct 2 22:00:59.531115 systemd[1]: Switching root. Oct 2 22:00:59.582508 systemd-journald[276]: Journal stopped Oct 2 22:01:13.157281 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 22:01:13.157302 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 22:01:13.157313 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 22:01:13.157322 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 22:01:13.157330 kernel: SELinux: policy capability open_perms=1 Oct 2 22:01:13.157338 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 22:01:13.157348 kernel: SELinux: policy capability always_check_network=0 Oct 2 22:01:13.157356 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 22:01:13.157364 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 22:01:13.157372 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 22:01:13.157381 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 22:01:13.157390 systemd[1]: Successfully loaded SELinux policy in 272.611ms. Oct 2 22:01:13.157400 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 29.282ms. Oct 2 22:01:13.157411 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 22:01:13.157422 systemd[1]: Detected virtualization microsoft. Oct 2 22:01:13.157431 systemd[1]: Detected architecture arm64. Oct 2 22:01:13.157440 systemd[1]: Detected first boot. Oct 2 22:01:13.157449 systemd[1]: Hostname set to . Oct 2 22:01:13.157458 systemd[1]: Initializing machine ID from random generator. Oct 2 22:01:13.157466 kernel: kauditd_printk_skb: 32 callbacks suppressed Oct 2 22:01:13.157475 kernel: audit: type=1400 audit(1696284063.235:80): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 22:01:13.157485 kernel: audit: type=1400 audit(1696284063.235:81): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 22:01:13.157495 kernel: audit: type=1334 audit(1696284063.241:82): prog-id=10 op=LOAD Oct 2 22:01:13.157504 kernel: audit: type=1334 audit(1696284063.241:83): prog-id=10 op=UNLOAD Oct 2 22:01:13.157512 kernel: audit: type=1334 audit(1696284063.259:84): prog-id=11 op=LOAD Oct 2 22:01:13.157521 kernel: audit: type=1334 audit(1696284063.259:85): prog-id=11 op=UNLOAD Oct 2 22:01:13.157529 systemd[1]: Populated /etc with preset unit settings. Oct 2 22:01:13.157539 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 22:01:13.157550 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 22:01:13.157560 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 22:01:13.157570 kernel: audit: type=1334 audit(1696284072.366:86): prog-id=12 op=LOAD Oct 2 22:01:13.157578 kernel: audit: type=1334 audit(1696284072.366:87): prog-id=3 op=UNLOAD Oct 2 22:01:13.157587 kernel: audit: type=1334 audit(1696284072.372:88): prog-id=13 op=LOAD Oct 2 22:01:13.157595 kernel: audit: type=1334 audit(1696284072.379:89): prog-id=14 op=LOAD Oct 2 22:01:13.157603 kernel: audit: type=1334 audit(1696284072.379:90): prog-id=4 op=UNLOAD Oct 2 22:01:13.157612 kernel: audit: type=1334 audit(1696284072.379:91): prog-id=5 op=UNLOAD Oct 2 22:01:13.157620 kernel: audit: type=1334 audit(1696284072.385:92): prog-id=15 op=LOAD Oct 2 22:01:13.157630 kernel: audit: type=1334 audit(1696284072.385:93): prog-id=12 op=UNLOAD Oct 2 22:01:13.157638 kernel: audit: type=1334 audit(1696284072.390:94): prog-id=16 op=LOAD Oct 2 22:01:13.157647 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 22:01:13.157658 kernel: audit: type=1334 audit(1696284072.396:95): prog-id=17 op=LOAD Oct 2 22:01:13.157667 systemd[1]: Stopped iscsiuio.service. Oct 2 22:01:13.157677 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 22:01:13.157686 systemd[1]: Stopped iscsid.service. Oct 2 22:01:13.157696 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 22:01:13.157706 systemd[1]: Stopped initrd-switch-root.service. Oct 2 22:01:13.157715 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 22:01:13.157725 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 22:01:13.157734 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 22:01:13.157744 systemd[1]: Created slice system-getty.slice. Oct 2 22:01:13.157753 systemd[1]: Created slice system-modprobe.slice. Oct 2 22:01:13.157762 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 22:01:13.157772 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 22:01:13.157783 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 22:01:13.157792 systemd[1]: Created slice user.slice. Oct 2 22:01:13.157801 systemd[1]: Started systemd-ask-password-console.path. Oct 2 22:01:13.157810 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 22:01:13.157820 systemd[1]: Set up automount boot.automount. Oct 2 22:01:13.157829 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 22:01:13.157839 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 22:01:13.157848 systemd[1]: Stopped target initrd-fs.target. Oct 2 22:01:13.157858 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 22:01:13.157868 systemd[1]: Reached target integritysetup.target. Oct 2 22:01:13.157878 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 22:01:13.157887 systemd[1]: Reached target remote-fs.target. Oct 2 22:01:13.157896 systemd[1]: Reached target slices.target. Oct 2 22:01:13.157905 systemd[1]: Reached target swap.target. Oct 2 22:01:13.157916 systemd[1]: Reached target torcx.target. Oct 2 22:01:13.157927 systemd[1]: Reached target veritysetup.target. Oct 2 22:01:13.157936 systemd[1]: Listening on systemd-coredump.socket. Oct 2 22:01:13.157946 systemd[1]: Listening on systemd-initctl.socket. Oct 2 22:01:13.157955 systemd[1]: Listening on systemd-networkd.socket. Oct 2 22:01:13.157965 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 22:01:13.157974 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 22:01:13.157984 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 22:01:13.157994 systemd[1]: Mounting dev-hugepages.mount... Oct 2 22:01:13.158003 systemd[1]: Mounting dev-mqueue.mount... Oct 2 22:01:13.158013 systemd[1]: Mounting media.mount... Oct 2 22:01:13.158022 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 22:01:13.158031 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 22:01:13.158041 systemd[1]: Mounting tmp.mount... Oct 2 22:01:13.158050 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 22:01:13.158060 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 22:01:13.158071 systemd[1]: Starting kmod-static-nodes.service... Oct 2 22:01:13.158080 systemd[1]: Starting modprobe@configfs.service... Oct 2 22:01:13.158090 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 22:01:13.158099 systemd[1]: Starting modprobe@drm.service... Oct 2 22:01:13.158108 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 22:01:13.158118 systemd[1]: Starting modprobe@fuse.service... Oct 2 22:01:13.158128 systemd[1]: Starting modprobe@loop.service... Oct 2 22:01:13.158137 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 22:01:13.158147 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 22:01:13.158157 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 22:01:13.158167 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 22:01:13.158176 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 22:01:13.158185 systemd[1]: Stopped systemd-journald.service. Oct 2 22:01:13.158195 systemd[1]: systemd-journald.service: Consumed 3.199s CPU time. Oct 2 22:01:13.158204 systemd[1]: Starting systemd-journald.service... Oct 2 22:01:13.158220 kernel: loop: module loaded Oct 2 22:01:13.158229 systemd[1]: Starting systemd-modules-load.service... Oct 2 22:01:13.158239 systemd[1]: Starting systemd-network-generator.service... Oct 2 22:01:13.158249 kernel: fuse: init (API version 7.34) Oct 2 22:01:13.158258 systemd[1]: Starting systemd-remount-fs.service... Oct 2 22:01:13.158268 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 22:01:13.158277 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 22:01:13.158287 systemd[1]: Stopped verity-setup.service. Oct 2 22:01:13.158296 systemd[1]: Mounted dev-hugepages.mount. Oct 2 22:01:13.158306 systemd[1]: Mounted dev-mqueue.mount. Oct 2 22:01:13.158315 systemd[1]: Mounted media.mount. Oct 2 22:01:13.158325 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 22:01:13.158335 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 22:01:13.158345 systemd[1]: Mounted tmp.mount. Oct 2 22:01:13.158354 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 22:01:13.158363 systemd[1]: Finished kmod-static-nodes.service. Oct 2 22:01:13.158376 systemd-journald[1180]: Journal started Oct 2 22:01:13.158414 systemd-journald[1180]: Runtime Journal (/run/log/journal/cbb01b3f2b6846d181d44364e20c620c) is 8.0M, max 78.6M, 70.6M free. Oct 2 22:01:02.426000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 22:01:03.235000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 22:01:03.235000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 22:01:03.241000 audit: BPF prog-id=10 op=LOAD Oct 2 22:01:03.241000 audit: BPF prog-id=10 op=UNLOAD Oct 2 22:01:03.259000 audit: BPF prog-id=11 op=LOAD Oct 2 22:01:03.259000 audit: BPF prog-id=11 op=UNLOAD Oct 2 22:01:12.366000 audit: BPF prog-id=12 op=LOAD Oct 2 22:01:12.366000 audit: BPF prog-id=3 op=UNLOAD Oct 2 22:01:12.372000 audit: BPF prog-id=13 op=LOAD Oct 2 22:01:12.379000 audit: BPF prog-id=14 op=LOAD Oct 2 22:01:12.379000 audit: BPF prog-id=4 op=UNLOAD Oct 2 22:01:12.379000 audit: BPF prog-id=5 op=UNLOAD Oct 2 22:01:12.385000 audit: BPF prog-id=15 op=LOAD Oct 2 22:01:12.385000 audit: BPF prog-id=12 op=UNLOAD Oct 2 22:01:12.390000 audit: BPF prog-id=16 op=LOAD Oct 2 22:01:12.396000 audit: BPF prog-id=17 op=LOAD Oct 2 22:01:12.396000 audit: BPF prog-id=13 op=UNLOAD Oct 2 22:01:12.396000 audit: BPF prog-id=14 op=UNLOAD Oct 2 22:01:12.402000 audit: BPF prog-id=18 op=LOAD Oct 2 22:01:12.402000 audit: BPF prog-id=15 op=UNLOAD Oct 2 22:01:12.408000 audit: BPF prog-id=19 op=LOAD Oct 2 22:01:12.414000 audit: BPF prog-id=20 op=LOAD Oct 2 22:01:12.414000 audit: BPF prog-id=16 op=UNLOAD Oct 2 22:01:12.414000 audit: BPF prog-id=17 op=UNLOAD Oct 2 22:01:12.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:12.439000 audit: BPF prog-id=18 op=UNLOAD Oct 2 22:01:12.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:12.452000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:12.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:12.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:12.949000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:12.967000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:12.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:12.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:12.985000 audit: BPF prog-id=21 op=LOAD Oct 2 22:01:12.985000 audit: BPF prog-id=22 op=LOAD Oct 2 22:01:12.985000 audit: BPF prog-id=23 op=LOAD Oct 2 22:01:12.985000 audit: BPF prog-id=19 op=UNLOAD Oct 2 22:01:12.985000 audit: BPF prog-id=20 op=UNLOAD Oct 2 22:01:13.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.150000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 22:01:13.150000 audit[1180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=ffffece19cb0 a2=4000 a3=1 items=0 ppid=1 pid=1180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:01:13.150000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 22:01:12.364768 systemd[1]: Queued start job for default target multi-user.target. Oct 2 22:01:04.632164 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 22:01:12.415287 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 22:01:04.687960 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 22:01:12.415662 systemd[1]: systemd-journald.service: Consumed 3.199s CPU time. Oct 2 22:01:04.687980 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 22:01:13.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:04.688018 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 22:01:04.688028 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 22:01:04.688066 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 22:01:04.688077 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 22:01:04.688303 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 22:01:04.688332 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 22:01:04.688343 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 22:01:04.688667 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 22:01:04.688700 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 22:01:04.688718 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 22:01:04.688731 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 22:01:04.688747 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 22:01:04.688759 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:04Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 22:01:10.962518 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:10Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 22:01:10.962777 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:10Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 22:01:10.962867 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:10Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 22:01:10.963012 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:10Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 22:01:10.963058 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:10Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 22:01:10.963111 /usr/lib/systemd/system-generators/torcx-generator[1074]: time="2023-10-02T22:01:10Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 22:01:13.169991 systemd[1]: Started systemd-journald.service. Oct 2 22:01:13.170000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.170860 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 22:01:13.170988 systemd[1]: Finished modprobe@configfs.service. Oct 2 22:01:13.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.175717 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 22:01:13.175834 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 22:01:13.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.180554 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 22:01:13.180671 systemd[1]: Finished modprobe@drm.service. Oct 2 22:01:13.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.184000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.185137 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 22:01:13.185327 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 22:01:13.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.190272 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 22:01:13.190385 systemd[1]: Finished modprobe@fuse.service. Oct 2 22:01:13.194000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.194000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.194681 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 22:01:13.194795 systemd[1]: Finished modprobe@loop.service. Oct 2 22:01:13.199000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.199000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.199585 systemd[1]: Finished systemd-modules-load.service. Oct 2 22:01:13.203000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.204509 systemd[1]: Finished systemd-network-generator.service. Oct 2 22:01:13.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.214000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.209808 systemd[1]: Finished systemd-remount-fs.service. Oct 2 22:01:13.214951 systemd[1]: Reached target network-pre.target. Oct 2 22:01:13.220621 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 22:01:13.225735 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 22:01:13.231138 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 22:01:13.266754 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 22:01:13.272254 systemd[1]: Starting systemd-journal-flush.service... Oct 2 22:01:13.277070 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 22:01:13.278082 systemd[1]: Starting systemd-random-seed.service... Oct 2 22:01:13.282217 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 22:01:13.283128 systemd[1]: Starting systemd-sysctl.service... Oct 2 22:01:13.287970 systemd[1]: Starting systemd-sysusers.service... Oct 2 22:01:13.293870 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 22:01:13.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.298642 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 22:01:13.303535 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 22:01:13.309409 systemd[1]: Starting systemd-udev-settle.service... Oct 2 22:01:13.334491 udevadm[1194]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 22:01:13.339630 systemd[1]: Finished systemd-random-seed.service. Oct 2 22:01:13.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.347686 systemd[1]: Reached target first-boot-complete.target. Oct 2 22:01:13.357935 systemd-journald[1180]: Time spent on flushing to /var/log/journal/cbb01b3f2b6846d181d44364e20c620c is 14.622ms for 1130 entries. Oct 2 22:01:13.357935 systemd-journald[1180]: System Journal (/var/log/journal/cbb01b3f2b6846d181d44364e20c620c) is 8.0M, max 2.6G, 2.6G free. Oct 2 22:01:13.424989 systemd-journald[1180]: Received client request to flush runtime journal. Oct 2 22:01:13.426329 systemd[1]: Finished systemd-journal-flush.service. Oct 2 22:01:13.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:13.434403 systemd[1]: Finished systemd-sysctl.service. Oct 2 22:01:13.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:14.132850 systemd[1]: Finished systemd-sysusers.service. Oct 2 22:01:14.137000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:14.813203 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 22:01:14.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:14.818000 audit: BPF prog-id=24 op=LOAD Oct 2 22:01:14.818000 audit: BPF prog-id=25 op=LOAD Oct 2 22:01:14.818000 audit: BPF prog-id=7 op=UNLOAD Oct 2 22:01:14.818000 audit: BPF prog-id=8 op=UNLOAD Oct 2 22:01:14.819481 systemd[1]: Starting systemd-udevd.service... Oct 2 22:01:14.840657 systemd-udevd[1197]: Using default interface naming scheme 'v252'. Oct 2 22:01:15.039184 systemd[1]: Started systemd-udevd.service. Oct 2 22:01:15.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:15.050000 audit: BPF prog-id=26 op=LOAD Oct 2 22:01:15.051223 systemd[1]: Starting systemd-networkd.service... Oct 2 22:01:15.091579 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Oct 2 22:01:15.116000 audit: BPF prog-id=27 op=LOAD Oct 2 22:01:15.116000 audit: BPF prog-id=28 op=LOAD Oct 2 22:01:15.116000 audit: BPF prog-id=29 op=LOAD Oct 2 22:01:15.117830 systemd[1]: Starting systemd-userdbd.service... Oct 2 22:01:15.179000 audit[1206]: AVC avc: denied { confidentiality } for pid=1206 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 22:01:15.181237 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 22:01:15.181314 kernel: hv_vmbus: registering driver hv_balloon Oct 2 22:01:15.194844 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 22:01:15.194924 kernel: hv_balloon: Memory hot add disabled on ARM64 Oct 2 22:01:15.204246 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 22:01:15.206240 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 22:01:15.223250 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 22:01:15.223343 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 22:01:15.223360 kernel: hv_vmbus: registering driver hv_utils Oct 2 22:01:15.228690 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 22:01:15.228928 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 22:01:15.226014 systemd[1]: Started systemd-userdbd.service. Oct 2 22:01:15.229895 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 22:01:14.980378 kernel: Console: switching to colour dummy device 80x25 Oct 2 22:01:15.035936 systemd-journald[1180]: Time jumped backwards, rotating. Oct 2 22:01:15.036032 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 22:01:14.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:15.179000 audit[1206]: SYSCALL arch=c00000b7 syscall=105 success=yes exit=0 a0=aaaaec8da510 a1=aa2c a2=ffff81ee24b0 a3=aaaaec838010 items=10 ppid=1197 pid=1206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:01:15.179000 audit: CWD cwd="/" Oct 2 22:01:15.179000 audit: PATH item=0 name=(null) inode=10507 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:15.179000 audit: PATH item=1 name=(null) inode=10508 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:15.179000 audit: PATH item=2 name=(null) inode=10507 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:15.179000 audit: PATH item=3 name=(null) inode=10509 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:15.179000 audit: PATH item=4 name=(null) inode=10507 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:15.179000 audit: PATH item=5 name=(null) inode=10510 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:15.179000 audit: PATH item=6 name=(null) inode=10507 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:15.179000 audit: PATH item=7 name=(null) inode=10511 dev=00:0a mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:15.179000 audit: PATH item=8 name=(null) inode=10507 dev=00:0a mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:15.179000 audit: PATH item=9 name=(null) inode=10512 dev=00:0a mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 22:01:15.179000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 22:01:15.336028 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1211) Oct 2 22:01:15.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:15.352136 systemd-networkd[1218]: lo: Link UP Oct 2 22:01:15.352145 systemd-networkd[1218]: lo: Gained carrier Oct 2 22:01:15.352532 systemd-networkd[1218]: Enumeration completed Oct 2 22:01:15.352618 systemd[1]: Started systemd-networkd.service. Oct 2 22:01:15.359542 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 22:01:15.369654 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 22:01:15.375441 systemd[1]: Finished systemd-udev-settle.service. Oct 2 22:01:15.380000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:15.383118 systemd[1]: Starting lvm2-activation-early.service... Oct 2 22:01:15.387741 systemd-networkd[1218]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 22:01:15.443984 kernel: mlx5_core 5755:00:02.0 enP22357s1: Link up Oct 2 22:01:15.491971 kernel: hv_netvsc 002248b3-c49b-0022-48b3-c49b002248b3 eth0: Data path switched to VF: enP22357s1 Oct 2 22:01:15.492718 systemd-networkd[1218]: enP22357s1: Link UP Oct 2 22:01:15.492809 systemd-networkd[1218]: eth0: Link UP Oct 2 22:01:15.492817 systemd-networkd[1218]: eth0: Gained carrier Oct 2 22:01:15.499219 systemd-networkd[1218]: enP22357s1: Gained carrier Oct 2 22:01:15.507069 systemd-networkd[1218]: eth0: DHCPv4 address 10.200.20.17/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 22:01:15.714913 lvm[1276]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 22:01:15.777128 systemd[1]: Finished lvm2-activation-early.service. Oct 2 22:01:15.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:15.782209 systemd[1]: Reached target cryptsetup.target. Oct 2 22:01:15.788326 systemd[1]: Starting lvm2-activation.service... Oct 2 22:01:15.794235 lvm[1278]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 22:01:15.818900 systemd[1]: Finished lvm2-activation.service. Oct 2 22:01:15.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:15.824288 systemd[1]: Reached target local-fs-pre.target. Oct 2 22:01:15.829143 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 22:01:15.829170 systemd[1]: Reached target local-fs.target. Oct 2 22:01:15.833381 systemd[1]: Reached target machines.target. Oct 2 22:01:15.838918 systemd[1]: Starting ldconfig.service... Oct 2 22:01:15.843674 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 22:01:15.843740 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 22:01:15.844913 systemd[1]: Starting systemd-boot-update.service... Oct 2 22:01:15.850390 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 22:01:15.858306 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 22:01:15.863243 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 22:01:15.863301 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 22:01:15.864329 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 22:01:15.887878 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1280 (bootctl) Oct 2 22:01:15.889271 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 22:01:16.301664 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 22:01:16.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:16.596601 systemd-tmpfiles[1283]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 22:01:16.705249 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 22:01:16.706697 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 22:01:16.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:16.734100 systemd-networkd[1218]: eth0: Gained IPv6LL Oct 2 22:01:16.739243 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 22:01:16.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:16.769635 systemd-tmpfiles[1283]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 22:01:16.773508 systemd-fsck[1288]: fsck.fat 4.2 (2021-01-31) Oct 2 22:01:16.773508 systemd-fsck[1288]: /dev/sda1: 236 files, 113463/258078 clusters Oct 2 22:01:16.775362 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 22:01:16.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:16.783324 systemd[1]: Mounting boot.mount... Oct 2 22:01:16.799700 systemd[1]: Mounted boot.mount. Oct 2 22:01:16.810684 systemd[1]: Finished systemd-boot-update.service. Oct 2 22:01:16.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:16.869389 systemd-tmpfiles[1283]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 22:01:17.902848 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 22:01:17.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:17.912368 kernel: kauditd_printk_skb: 84 callbacks suppressed Oct 2 22:01:17.912423 kernel: audit: type=1130 audit(1696284077.907:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:17.913628 systemd[1]: Starting audit-rules.service... Oct 2 22:01:17.935348 systemd[1]: Starting clean-ca-certificates.service... Oct 2 22:01:17.942246 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 22:01:17.947000 audit: BPF prog-id=30 op=LOAD Oct 2 22:01:17.954551 systemd[1]: Starting systemd-resolved.service... Oct 2 22:01:17.959017 kernel: audit: type=1334 audit(1696284077.947:166): prog-id=30 op=LOAD Oct 2 22:01:17.958000 audit: BPF prog-id=31 op=LOAD Oct 2 22:01:17.960642 systemd[1]: Starting systemd-timesyncd.service... Oct 2 22:01:17.966969 kernel: audit: type=1334 audit(1696284077.958:167): prog-id=31 op=LOAD Oct 2 22:01:17.972226 systemd[1]: Starting systemd-update-utmp.service... Oct 2 22:01:17.983712 systemd[1]: Finished clean-ca-certificates.service. Oct 2 22:01:17.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:17.989033 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 22:01:18.008968 kernel: audit: type=1130 audit(1696284077.987:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:18.076000 audit[1300]: SYSTEM_BOOT pid=1300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 22:01:18.085367 systemd[1]: Started systemd-timesyncd.service. Oct 2 22:01:18.106823 kernel: audit: type=1127 audit(1696284078.076:169): pid=1300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 22:01:18.106923 kernel: audit: type=1130 audit(1696284078.100:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:18.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:18.101750 systemd[1]: Reached target time-set.target. Oct 2 22:01:18.128837 systemd[1]: Finished systemd-update-utmp.service. Oct 2 22:01:18.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:18.154211 kernel: audit: type=1130 audit(1696284078.134:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:18.196360 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 22:01:18.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:18.221994 kernel: audit: type=1130 audit(1696284078.201:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:18.238532 systemd-resolved[1298]: Positive Trust Anchors: Oct 2 22:01:18.238544 systemd-resolved[1298]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 22:01:18.238571 systemd-resolved[1298]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 22:01:18.329119 systemd-resolved[1298]: Using system hostname 'ci-3510.3.0-a-176754823f'. Oct 2 22:01:18.330883 systemd[1]: Started systemd-resolved.service. Oct 2 22:01:18.336022 systemd[1]: Reached target network.target. Oct 2 22:01:18.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:18.357301 systemd[1]: Reached target network-online.target. Oct 2 22:01:18.362818 kernel: audit: type=1130 audit(1696284078.334:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:01:18.363508 systemd[1]: Reached target nss-lookup.target. Oct 2 22:01:18.368144 systemd-timesyncd[1299]: Contacted time server 162.159.200.1:123 (0.flatcar.pool.ntp.org). Oct 2 22:01:18.368194 systemd-timesyncd[1299]: Initial clock synchronization to Mon 2023-10-02 22:01:18.369144 UTC. Oct 2 22:01:18.509000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 22:01:18.509000 audit[1315]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff70e2820 a2=420 a3=0 items=0 ppid=1294 pid=1315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:01:18.509000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 22:01:18.523959 kernel: audit: type=1305 audit(1696284078.509:174): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 22:01:18.525254 augenrules[1315]: No rules Oct 2 22:01:18.526218 systemd[1]: Finished audit-rules.service. Oct 2 22:01:25.519262 ldconfig[1279]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 22:01:25.534156 systemd[1]: Finished ldconfig.service. Oct 2 22:01:25.540282 systemd[1]: Starting systemd-update-done.service... Oct 2 22:01:25.578258 systemd[1]: Finished systemd-update-done.service. Oct 2 22:01:25.583264 systemd[1]: Reached target sysinit.target. Oct 2 22:01:25.587829 systemd[1]: Started motdgen.path. Oct 2 22:01:25.591888 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 22:01:25.598740 systemd[1]: Started logrotate.timer. Oct 2 22:01:25.603070 systemd[1]: Started mdadm.timer. Oct 2 22:01:25.607260 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 22:01:25.612176 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 22:01:25.612214 systemd[1]: Reached target paths.target. Oct 2 22:01:25.616709 systemd[1]: Reached target timers.target. Oct 2 22:01:25.622006 systemd[1]: Listening on dbus.socket. Oct 2 22:01:25.627932 systemd[1]: Starting docker.socket... Oct 2 22:01:25.635398 systemd[1]: Listening on sshd.socket. Oct 2 22:01:25.640388 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 22:01:25.640871 systemd[1]: Listening on docker.socket. Oct 2 22:01:25.645319 systemd[1]: Reached target sockets.target. Oct 2 22:01:25.650269 systemd[1]: Reached target basic.target. Oct 2 22:01:25.654648 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 22:01:25.654679 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 22:01:25.655835 systemd[1]: Starting containerd.service... Oct 2 22:01:25.660724 systemd[1]: Starting dbus.service... Oct 2 22:01:25.665457 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 22:01:25.671367 systemd[1]: Starting extend-filesystems.service... Oct 2 22:01:25.676299 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 22:01:25.677375 systemd[1]: Starting motdgen.service... Oct 2 22:01:25.682987 systemd[1]: Started nvidia.service. Oct 2 22:01:25.689970 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 22:01:25.696302 systemd[1]: Starting prepare-critools.service... Oct 2 22:01:25.702773 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 22:01:25.708626 systemd[1]: Starting sshd-keygen.service... Oct 2 22:01:25.716671 systemd[1]: Starting systemd-logind.service... Oct 2 22:01:25.724170 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 22:01:25.724238 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 22:01:25.724685 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 22:01:25.725421 systemd[1]: Starting update-engine.service... Oct 2 22:01:25.733066 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 22:01:25.742252 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 22:01:25.742427 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 22:01:25.791094 jq[1325]: false Oct 2 22:01:25.794471 extend-filesystems[1326]: Found sda Oct 2 22:01:25.794471 extend-filesystems[1326]: Found sda1 Oct 2 22:01:25.794471 extend-filesystems[1326]: Found sda2 Oct 2 22:01:25.794471 extend-filesystems[1326]: Found sda3 Oct 2 22:01:25.794471 extend-filesystems[1326]: Found usr Oct 2 22:01:25.794471 extend-filesystems[1326]: Found sda4 Oct 2 22:01:25.826543 extend-filesystems[1326]: Found sda6 Oct 2 22:01:25.826543 extend-filesystems[1326]: Found sda7 Oct 2 22:01:25.826543 extend-filesystems[1326]: Found sda9 Oct 2 22:01:25.826543 extend-filesystems[1326]: Checking size of /dev/sda9 Oct 2 22:01:25.870739 jq[1340]: true Oct 2 22:01:25.813469 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 22:01:25.871058 jq[1352]: true Oct 2 22:01:25.813627 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 22:01:25.838266 systemd-logind[1336]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 22:01:25.840935 systemd-logind[1336]: New seat seat0. Oct 2 22:01:25.851974 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 22:01:25.852146 systemd[1]: Finished motdgen.service. Oct 2 22:01:25.938157 env[1354]: time="2023-10-02T22:01:25.938101548Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 22:01:25.955996 extend-filesystems[1326]: Old size kept for /dev/sda9 Oct 2 22:01:25.974730 extend-filesystems[1326]: Found sr0 Oct 2 22:01:25.991118 tar[1346]: crictl Oct 2 22:01:25.961586 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 22:01:25.993398 tar[1345]: ./ Oct 2 22:01:25.993398 tar[1345]: ./loopback Oct 2 22:01:25.993601 env[1354]: time="2023-10-02T22:01:25.977686903Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 22:01:25.993601 env[1354]: time="2023-10-02T22:01:25.977824949Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 22:01:25.961761 systemd[1]: Finished extend-filesystems.service. Oct 2 22:01:26.012074 env[1354]: time="2023-10-02T22:01:26.010782808Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 22:01:26.012074 env[1354]: time="2023-10-02T22:01:26.010828690Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 22:01:26.012074 env[1354]: time="2023-10-02T22:01:26.011080061Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 22:01:26.012074 env[1354]: time="2023-10-02T22:01:26.011099542Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 22:01:26.012074 env[1354]: time="2023-10-02T22:01:26.011113342Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 22:01:26.012074 env[1354]: time="2023-10-02T22:01:26.011123383Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 22:01:26.012074 env[1354]: time="2023-10-02T22:01:26.011199906Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 22:01:26.012074 env[1354]: time="2023-10-02T22:01:26.011498279Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 22:01:26.012074 env[1354]: time="2023-10-02T22:01:26.011610484Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 22:01:26.012074 env[1354]: time="2023-10-02T22:01:26.011625125Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 22:01:26.012324 env[1354]: time="2023-10-02T22:01:26.011674527Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 22:01:26.012324 env[1354]: time="2023-10-02T22:01:26.011686687Z" level=info msg="metadata content store policy set" policy=shared Oct 2 22:01:26.017131 dbus-daemon[1324]: [system] SELinux support is enabled Oct 2 22:01:26.017296 systemd[1]: Started dbus.service. Oct 2 22:01:26.023108 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 22:01:26.023131 systemd[1]: Reached target system-config.target. Oct 2 22:01:26.030297 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 22:01:26.030316 systemd[1]: Reached target user-config.target. Oct 2 22:01:26.038711 systemd[1]: Started systemd-logind.service. Oct 2 22:01:26.044560 tar[1345]: ./bandwidth Oct 2 22:01:26.046652 env[1354]: time="2023-10-02T22:01:26.046605804Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 22:01:26.046652 env[1354]: time="2023-10-02T22:01:26.046653926Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 22:01:26.046745 env[1354]: time="2023-10-02T22:01:26.046667967Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 22:01:26.046745 env[1354]: time="2023-10-02T22:01:26.046701809Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 22:01:26.046745 env[1354]: time="2023-10-02T22:01:26.046720129Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 22:01:26.046745 env[1354]: time="2023-10-02T22:01:26.046734810Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 22:01:26.046839 env[1354]: time="2023-10-02T22:01:26.046747691Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 22:01:26.047153 env[1354]: time="2023-10-02T22:01:26.047127867Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 22:01:26.047153 env[1354]: time="2023-10-02T22:01:26.047153428Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 22:01:26.049479 env[1354]: time="2023-10-02T22:01:26.047168429Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 22:01:26.049479 env[1354]: time="2023-10-02T22:01:26.047181269Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 22:01:26.049479 env[1354]: time="2023-10-02T22:01:26.047193990Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 22:01:26.049479 env[1354]: time="2023-10-02T22:01:26.049436447Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 22:01:26.049585 env[1354]: time="2023-10-02T22:01:26.049526611Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 22:01:26.049855 env[1354]: time="2023-10-02T22:01:26.049814144Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 22:01:26.049855 env[1354]: time="2023-10-02T22:01:26.049849065Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 22:01:26.049915 env[1354]: time="2023-10-02T22:01:26.049864706Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 22:01:26.049977 env[1354]: time="2023-10-02T22:01:26.049933549Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 22:01:26.049977 env[1354]: time="2023-10-02T22:01:26.049965870Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 22:01:26.050037 env[1354]: time="2023-10-02T22:01:26.049978191Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 22:01:26.050037 env[1354]: time="2023-10-02T22:01:26.049989151Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 22:01:26.050037 env[1354]: time="2023-10-02T22:01:26.050002232Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 22:01:26.050037 env[1354]: time="2023-10-02T22:01:26.050014592Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 22:01:26.050037 env[1354]: time="2023-10-02T22:01:26.050025233Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 22:01:26.050127 env[1354]: time="2023-10-02T22:01:26.050043434Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 22:01:26.050127 env[1354]: time="2023-10-02T22:01:26.050057594Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 22:01:26.050212 env[1354]: time="2023-10-02T22:01:26.050180760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 22:01:26.050212 env[1354]: time="2023-10-02T22:01:26.050203881Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 22:01:26.050263 env[1354]: time="2023-10-02T22:01:26.050219561Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 22:01:26.050263 env[1354]: time="2023-10-02T22:01:26.050231682Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 22:01:26.050263 env[1354]: time="2023-10-02T22:01:26.050247163Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 22:01:26.050263 env[1354]: time="2023-10-02T22:01:26.050257483Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 22:01:26.050337 env[1354]: time="2023-10-02T22:01:26.050274284Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 22:01:26.050337 env[1354]: time="2023-10-02T22:01:26.050306565Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 22:01:26.050669 env[1354]: time="2023-10-02T22:01:26.050514294Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 22:01:26.050669 env[1354]: time="2023-10-02T22:01:26.050592818Z" level=info msg="Connect containerd service" Oct 2 22:01:26.050669 env[1354]: time="2023-10-02T22:01:26.050630139Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 22:01:26.086793 env[1354]: time="2023-10-02T22:01:26.053810357Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 22:01:26.086793 env[1354]: time="2023-10-02T22:01:26.054025207Z" level=info msg="Start subscribing containerd event" Oct 2 22:01:26.086793 env[1354]: time="2023-10-02T22:01:26.054062768Z" level=info msg="Start recovering state" Oct 2 22:01:26.086793 env[1354]: time="2023-10-02T22:01:26.054120171Z" level=info msg="Start event monitor" Oct 2 22:01:26.086793 env[1354]: time="2023-10-02T22:01:26.054198694Z" level=info msg="Start snapshots syncer" Oct 2 22:01:26.086793 env[1354]: time="2023-10-02T22:01:26.054210615Z" level=info msg="Start cni network conf syncer for default" Oct 2 22:01:26.086793 env[1354]: time="2023-10-02T22:01:26.054220735Z" level=info msg="Start streaming server" Oct 2 22:01:26.086793 env[1354]: time="2023-10-02T22:01:26.055905368Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 22:01:26.086793 env[1354]: time="2023-10-02T22:01:26.056044174Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 22:01:26.086793 env[1354]: time="2023-10-02T22:01:26.056095697Z" level=info msg="containerd successfully booted in 0.119245s" Oct 2 22:01:26.087024 bash[1394]: Updated "/home/core/.ssh/authorized_keys" Oct 2 22:01:26.056157 systemd[1]: Started containerd.service. Oct 2 22:01:26.077565 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 22:01:26.103118 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 22:01:26.183546 tar[1345]: ./ptp Oct 2 22:01:26.263261 tar[1345]: ./vlan Oct 2 22:01:26.328302 tar[1345]: ./host-device Oct 2 22:01:26.390750 tar[1345]: ./tuning Oct 2 22:01:26.449859 tar[1345]: ./vrf Oct 2 22:01:26.502038 systemd[1]: Finished prepare-critools.service. Oct 2 22:01:26.513890 tar[1345]: ./sbr Oct 2 22:01:26.543380 tar[1345]: ./tap Oct 2 22:01:26.577119 tar[1345]: ./dhcp Oct 2 22:01:26.644255 update_engine[1338]: I1002 22:01:26.621758 1338 main.cc:92] Flatcar Update Engine starting Oct 2 22:01:26.660149 tar[1345]: ./static Oct 2 22:01:26.685154 tar[1345]: ./firewall Oct 2 22:01:26.707025 systemd[1]: Started update-engine.service. Oct 2 22:01:26.718549 update_engine[1338]: I1002 22:01:26.707069 1338 update_check_scheduler.cc:74] Next update check in 10m29s Oct 2 22:01:26.714236 systemd[1]: Started locksmithd.service. Oct 2 22:01:26.726029 tar[1345]: ./macvlan Oct 2 22:01:26.759137 tar[1345]: ./dummy Oct 2 22:01:26.791939 tar[1345]: ./bridge Oct 2 22:01:26.827479 tar[1345]: ./ipvlan Oct 2 22:01:26.859866 tar[1345]: ./portmap Oct 2 22:01:26.890863 tar[1345]: ./host-local Oct 2 22:01:26.993523 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 22:01:27.263807 sshd_keygen[1343]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 22:01:27.289382 systemd[1]: Finished sshd-keygen.service. Oct 2 22:01:27.296121 systemd[1]: Starting issuegen.service... Oct 2 22:01:27.304113 systemd[1]: Started waagent.service. Oct 2 22:01:27.309327 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 22:01:27.309476 systemd[1]: Finished issuegen.service. Oct 2 22:01:27.315897 systemd[1]: Starting systemd-user-sessions.service... Oct 2 22:01:27.344963 systemd[1]: Finished systemd-user-sessions.service. Oct 2 22:01:27.351779 systemd[1]: Started getty@tty1.service. Oct 2 22:01:27.357491 systemd[1]: Started serial-getty@ttyAMA0.service. Oct 2 22:01:27.362668 systemd[1]: Reached target getty.target. Oct 2 22:01:27.367279 systemd[1]: Reached target multi-user.target. Oct 2 22:01:27.380044 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 22:01:27.390658 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 22:01:27.390824 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 22:01:27.397452 systemd[1]: Startup finished in 730ms (kernel) + 19.301s (initrd) + 25.735s (userspace) = 45.766s. Oct 2 22:01:28.201488 login[1452]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Oct 2 22:01:28.227348 login[1451]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 22:01:28.277139 systemd[1]: Created slice user-500.slice. Oct 2 22:01:28.278692 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 22:01:28.281131 systemd-logind[1336]: New session 2 of user core. Oct 2 22:01:28.326780 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 22:01:28.328263 systemd[1]: Starting user@500.service... Oct 2 22:01:28.367733 (systemd)[1457]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:01:28.423259 locksmithd[1433]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 22:01:28.666791 systemd[1457]: Queued start job for default target default.target. Oct 2 22:01:28.667602 systemd[1457]: Reached target paths.target. Oct 2 22:01:28.667715 systemd[1457]: Reached target sockets.target. Oct 2 22:01:28.667785 systemd[1457]: Reached target timers.target. Oct 2 22:01:28.667940 systemd[1457]: Reached target basic.target. Oct 2 22:01:28.668126 systemd[1]: Started user@500.service. Oct 2 22:01:28.668761 systemd[1457]: Reached target default.target. Oct 2 22:01:28.668801 systemd[1457]: Startup finished in 291ms. Oct 2 22:01:28.668961 systemd[1]: Started session-2.scope. Oct 2 22:01:29.202874 login[1452]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 22:01:29.207511 systemd[1]: Started session-1.scope. Oct 2 22:01:29.207837 systemd-logind[1336]: New session 1 of user core. Oct 2 22:01:34.952669 waagent[1445]: 2023-10-02T22:01:34.952565Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 22:01:34.959985 waagent[1445]: 2023-10-02T22:01:34.959875Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 22:01:34.965030 waagent[1445]: 2023-10-02T22:01:34.964957Z INFO Daemon Daemon Python: 3.9.16 Oct 2 22:01:34.970384 waagent[1445]: 2023-10-02T22:01:34.970308Z INFO Daemon Daemon Run daemon Oct 2 22:01:34.975379 waagent[1445]: 2023-10-02T22:01:34.975316Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 22:01:34.995841 waagent[1445]: 2023-10-02T22:01:34.995720Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 22:01:35.013875 waagent[1445]: 2023-10-02T22:01:35.013738Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 22:01:35.024329 waagent[1445]: 2023-10-02T22:01:35.024247Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 22:01:35.030221 waagent[1445]: 2023-10-02T22:01:35.030139Z INFO Daemon Daemon Using waagent for provisioning Oct 2 22:01:35.036434 waagent[1445]: 2023-10-02T22:01:35.036364Z INFO Daemon Daemon Activate resource disk Oct 2 22:01:35.041530 waagent[1445]: 2023-10-02T22:01:35.041472Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 22:01:35.056423 waagent[1445]: 2023-10-02T22:01:35.056359Z INFO Daemon Daemon Found device: None Oct 2 22:01:35.063765 waagent[1445]: 2023-10-02T22:01:35.063684Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 22:01:35.074718 waagent[1445]: 2023-10-02T22:01:35.074642Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 22:01:35.089611 waagent[1445]: 2023-10-02T22:01:35.089546Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 22:01:35.097391 waagent[1445]: 2023-10-02T22:01:35.097326Z INFO Daemon Daemon Running default provisioning handler Oct 2 22:01:35.113850 waagent[1445]: 2023-10-02T22:01:35.113715Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 22:01:35.137354 waagent[1445]: 2023-10-02T22:01:35.137229Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 22:01:35.149741 waagent[1445]: 2023-10-02T22:01:35.149648Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 22:01:35.155453 waagent[1445]: 2023-10-02T22:01:35.155370Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 22:01:35.183303 waagent[1445]: 2023-10-02T22:01:35.183171Z INFO Daemon Daemon Successfully mounted dvd Oct 2 22:01:35.314209 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 22:01:35.361928 waagent[1445]: 2023-10-02T22:01:35.361787Z INFO Daemon Daemon Detect protocol endpoint Oct 2 22:01:35.367108 waagent[1445]: 2023-10-02T22:01:35.367037Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 22:01:35.372798 waagent[1445]: 2023-10-02T22:01:35.372737Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 22:01:35.379581 waagent[1445]: 2023-10-02T22:01:35.379524Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 22:01:35.385378 waagent[1445]: 2023-10-02T22:01:35.385322Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 22:01:35.390443 waagent[1445]: 2023-10-02T22:01:35.390388Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 22:01:35.554774 waagent[1445]: 2023-10-02T22:01:35.554704Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 22:01:35.562811 waagent[1445]: 2023-10-02T22:01:35.562761Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 22:01:35.569664 waagent[1445]: 2023-10-02T22:01:35.569533Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 22:01:36.315061 waagent[1445]: 2023-10-02T22:01:36.314883Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 22:01:36.332544 waagent[1445]: 2023-10-02T22:01:36.332468Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 22:01:36.339379 waagent[1445]: 2023-10-02T22:01:36.339311Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 22:01:36.425516 waagent[1445]: 2023-10-02T22:01:36.425380Z INFO Daemon Daemon Found private key matching thumbprint D0A6F29527D741A32E7A926B9C8903A89E01A253 Oct 2 22:01:36.434797 waagent[1445]: 2023-10-02T22:01:36.434721Z INFO Daemon Daemon Certificate with thumbprint 5D4093399E3E3AAF61C095B1999FEF911A8BBD0C has no matching private key. Oct 2 22:01:36.445008 waagent[1445]: 2023-10-02T22:01:36.444903Z INFO Daemon Daemon Fetch goal state completed Oct 2 22:01:36.495499 waagent[1445]: 2023-10-02T22:01:36.495442Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 6c23922d-2ddb-43b9-a426-cb78378c7678 New eTag: 9092035041115577143] Oct 2 22:01:36.510135 waagent[1445]: 2023-10-02T22:01:36.510057Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 22:01:36.526787 waagent[1445]: 2023-10-02T22:01:36.526727Z INFO Daemon Daemon Starting provisioning Oct 2 22:01:36.533423 waagent[1445]: 2023-10-02T22:01:36.533343Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 22:01:36.538729 waagent[1445]: 2023-10-02T22:01:36.538666Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-176754823f] Oct 2 22:01:36.608701 waagent[1445]: 2023-10-02T22:01:36.608571Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-176754823f] Oct 2 22:01:36.616335 waagent[1445]: 2023-10-02T22:01:36.616247Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 22:01:36.624286 waagent[1445]: 2023-10-02T22:01:36.624210Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 22:01:36.644575 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 22:01:36.644737 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 22:01:36.644794 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 22:01:36.645031 systemd[1]: Stopping systemd-networkd.service... Oct 2 22:01:36.651997 systemd-networkd[1218]: eth0: DHCPv6 lease lost Oct 2 22:01:36.653684 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 22:01:36.653860 systemd[1]: Stopped systemd-networkd.service. Oct 2 22:01:36.656113 systemd[1]: Starting systemd-networkd.service... Oct 2 22:01:36.688185 systemd-networkd[1499]: enP22357s1: Link UP Oct 2 22:01:36.688198 systemd-networkd[1499]: enP22357s1: Gained carrier Oct 2 22:01:36.689116 systemd-networkd[1499]: eth0: Link UP Oct 2 22:01:36.689126 systemd-networkd[1499]: eth0: Gained carrier Oct 2 22:01:36.689426 systemd-networkd[1499]: lo: Link UP Oct 2 22:01:36.689436 systemd-networkd[1499]: lo: Gained carrier Oct 2 22:01:36.689660 systemd-networkd[1499]: eth0: Gained IPv6LL Oct 2 22:01:36.690752 systemd-networkd[1499]: Enumeration completed Oct 2 22:01:36.690870 systemd[1]: Started systemd-networkd.service. Oct 2 22:01:36.692160 systemd-networkd[1499]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 22:01:36.692604 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 22:01:36.697976 waagent[1445]: 2023-10-02T22:01:36.697580Z INFO Daemon Daemon Create user account if not exists Oct 2 22:01:36.706651 waagent[1445]: 2023-10-02T22:01:36.706537Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 22:01:36.714352 waagent[1445]: 2023-10-02T22:01:36.714270Z INFO Daemon Daemon Configure sudoer Oct 2 22:01:36.719860 waagent[1445]: 2023-10-02T22:01:36.719778Z INFO Daemon Daemon Configure sshd Oct 2 22:01:36.724692 waagent[1445]: 2023-10-02T22:01:36.724625Z INFO Daemon Daemon Deploy ssh public key. Oct 2 22:01:36.729627 systemd-networkd[1499]: eth0: DHCPv4 address 10.200.20.17/24, gateway 10.200.20.1 acquired from 168.63.129.16 Oct 2 22:01:36.734041 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 22:01:36.821134 waagent[1445]: 2023-10-02T22:01:36.820993Z INFO Daemon Daemon Decode custom data Oct 2 22:01:36.826657 waagent[1445]: 2023-10-02T22:01:36.826567Z INFO Daemon Daemon Save custom data Oct 2 22:01:38.109418 waagent[1445]: 2023-10-02T22:01:38.109355Z INFO Daemon Daemon Provisioning complete Oct 2 22:01:38.130186 waagent[1445]: 2023-10-02T22:01:38.130120Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 22:01:38.137174 waagent[1445]: 2023-10-02T22:01:38.137101Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 22:01:38.148363 waagent[1445]: 2023-10-02T22:01:38.148290Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 22:01:38.447451 waagent[1508]: 2023-10-02T22:01:38.447304Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 22:01:38.448168 waagent[1508]: 2023-10-02T22:01:38.448109Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 22:01:38.448302 waagent[1508]: 2023-10-02T22:01:38.448257Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 22:01:38.460715 waagent[1508]: 2023-10-02T22:01:38.460640Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 22:01:38.460881 waagent[1508]: 2023-10-02T22:01:38.460832Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 22:01:38.539317 waagent[1508]: 2023-10-02T22:01:38.539184Z INFO ExtHandler ExtHandler Found private key matching thumbprint D0A6F29527D741A32E7A926B9C8903A89E01A253 Oct 2 22:01:38.539522 waagent[1508]: 2023-10-02T22:01:38.539469Z INFO ExtHandler ExtHandler Certificate with thumbprint 5D4093399E3E3AAF61C095B1999FEF911A8BBD0C has no matching private key. Oct 2 22:01:38.539747 waagent[1508]: 2023-10-02T22:01:38.539700Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 22:01:38.553131 waagent[1508]: 2023-10-02T22:01:38.553081Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: d834ccae-9efc-41fd-9e7f-5d198c0264e0 New eTag: 9092035041115577143] Oct 2 22:01:38.553704 waagent[1508]: 2023-10-02T22:01:38.553649Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 22:01:38.659770 waagent[1508]: 2023-10-02T22:01:38.659620Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 22:01:38.669867 waagent[1508]: 2023-10-02T22:01:38.669790Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1508 Oct 2 22:01:38.673606 waagent[1508]: 2023-10-02T22:01:38.673536Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 22:01:38.674987 waagent[1508]: 2023-10-02T22:01:38.674919Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 22:01:38.821297 waagent[1508]: 2023-10-02T22:01:38.821230Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 22:01:38.821694 waagent[1508]: 2023-10-02T22:01:38.821635Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 22:01:38.832294 waagent[1508]: 2023-10-02T22:01:38.832232Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 22:01:38.832785 waagent[1508]: 2023-10-02T22:01:38.832728Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 22:01:38.833922 waagent[1508]: 2023-10-02T22:01:38.833858Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 22:01:38.835318 waagent[1508]: 2023-10-02T22:01:38.835243Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 22:01:38.835969 waagent[1508]: 2023-10-02T22:01:38.835892Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 22:01:38.836233 waagent[1508]: 2023-10-02T22:01:38.836181Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 22:01:38.836865 waagent[1508]: 2023-10-02T22:01:38.836811Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 22:01:38.837282 waagent[1508]: 2023-10-02T22:01:38.837228Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 22:01:38.837282 waagent[1508]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 22:01:38.837282 waagent[1508]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 22:01:38.837282 waagent[1508]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 22:01:38.837282 waagent[1508]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 22:01:38.837282 waagent[1508]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 22:01:38.837282 waagent[1508]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 22:01:38.839641 waagent[1508]: 2023-10-02T22:01:38.839486Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 22:01:38.840345 waagent[1508]: 2023-10-02T22:01:38.840284Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 22:01:38.840602 waagent[1508]: 2023-10-02T22:01:38.840552Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 22:01:38.841274 waagent[1508]: 2023-10-02T22:01:38.841205Z INFO EnvHandler ExtHandler Configure routes Oct 2 22:01:38.841475 waagent[1508]: 2023-10-02T22:01:38.841423Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 22:01:38.841581 waagent[1508]: 2023-10-02T22:01:38.841341Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 22:01:38.842108 waagent[1508]: 2023-10-02T22:01:38.842034Z INFO EnvHandler ExtHandler Gateway:None Oct 2 22:01:38.842430 waagent[1508]: 2023-10-02T22:01:38.842378Z INFO EnvHandler ExtHandler Routes:None Oct 2 22:01:38.843261 waagent[1508]: 2023-10-02T22:01:38.843189Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 22:01:38.843367 waagent[1508]: 2023-10-02T22:01:38.843316Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 22:01:38.845027 waagent[1508]: 2023-10-02T22:01:38.844965Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 22:01:38.853330 waagent[1508]: 2023-10-02T22:01:38.853265Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 22:01:38.854041 waagent[1508]: 2023-10-02T22:01:38.853977Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 22:01:38.856557 waagent[1508]: 2023-10-02T22:01:38.856488Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 22:01:38.891461 waagent[1508]: 2023-10-02T22:01:38.891321Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1499' Oct 2 22:01:38.920496 waagent[1508]: 2023-10-02T22:01:38.920425Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 22:01:38.997051 waagent[1508]: 2023-10-02T22:01:38.996966Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 22:01:38.997051 waagent[1508]: Executing ['ip', '-a', '-o', 'link']: Oct 2 22:01:38.997051 waagent[1508]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 22:01:38.997051 waagent[1508]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:b3:c4:9b brd ff:ff:ff:ff:ff:ff Oct 2 22:01:38.997051 waagent[1508]: 3: enP22357s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:b3:c4:9b brd ff:ff:ff:ff:ff:ff\ altname enP22357p0s2 Oct 2 22:01:38.997051 waagent[1508]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 22:01:38.997051 waagent[1508]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 22:01:38.997051 waagent[1508]: 2: eth0 inet 10.200.20.17/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 22:01:38.997051 waagent[1508]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 22:01:38.997051 waagent[1508]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 22:01:38.997051 waagent[1508]: 2: eth0 inet6 fe80::222:48ff:feb3:c49b/64 scope link \ valid_lft forever preferred_lft forever Oct 2 22:01:39.123426 waagent[1508]: 2023-10-02T22:01:39.123304Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.9.1.1 -- exiting Oct 2 22:01:40.153288 waagent[1445]: 2023-10-02T22:01:40.153174Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 22:01:40.157162 waagent[1445]: 2023-10-02T22:01:40.157110Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.9.1.1 to be the latest agent Oct 2 22:01:41.291054 waagent[1540]: 2023-10-02T22:01:41.290937Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.9.1.1) Oct 2 22:01:41.291734 waagent[1540]: 2023-10-02T22:01:41.291666Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 22:01:41.291863 waagent[1540]: 2023-10-02T22:01:41.291815Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 22:01:41.301279 waagent[1540]: 2023-10-02T22:01:41.301173Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 22:01:41.304178 waagent[1540]: 2023-10-02T22:01:41.304116Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 22:01:41.304336 waagent[1540]: 2023-10-02T22:01:41.304287Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 22:01:41.317093 waagent[1540]: 2023-10-02T22:01:41.317020Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 22:01:41.329636 waagent[1540]: 2023-10-02T22:01:41.329572Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 22:01:41.330751 waagent[1540]: 2023-10-02T22:01:41.330687Z INFO ExtHandler Oct 2 22:01:41.330900 waagent[1540]: 2023-10-02T22:01:41.330853Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: b4667487-f4b3-481f-b633-b584f3fadb73 eTag: 9092035041115577143 source: Fabric] Oct 2 22:01:41.331661 waagent[1540]: 2023-10-02T22:01:41.331604Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 22:01:41.332850 waagent[1540]: 2023-10-02T22:01:41.332790Z INFO ExtHandler Oct 2 22:01:41.333007 waagent[1540]: 2023-10-02T22:01:41.332933Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 22:01:41.340005 waagent[1540]: 2023-10-02T22:01:41.339936Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 22:01:41.340491 waagent[1540]: 2023-10-02T22:01:41.340442Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 22:01:41.363039 waagent[1540]: 2023-10-02T22:01:41.362976Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 22:01:41.451835 waagent[1540]: 2023-10-02T22:01:41.451590Z INFO ExtHandler Downloaded certificate {'thumbprint': 'D0A6F29527D741A32E7A926B9C8903A89E01A253', 'hasPrivateKey': True} Oct 2 22:01:41.453176 waagent[1540]: 2023-10-02T22:01:41.453115Z INFO ExtHandler Downloaded certificate {'thumbprint': '5D4093399E3E3AAF61C095B1999FEF911A8BBD0C', 'hasPrivateKey': False} Oct 2 22:01:41.454198 waagent[1540]: 2023-10-02T22:01:41.454136Z INFO ExtHandler Fetch goal state completed Oct 2 22:01:41.476727 waagent[1540]: 2023-10-02T22:01:41.476656Z INFO ExtHandler ExtHandler WALinuxAgent-2.9.1.1 running as process 1540 Oct 2 22:01:41.480182 waagent[1540]: 2023-10-02T22:01:41.480120Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 22:01:41.481675 waagent[1540]: 2023-10-02T22:01:41.481616Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 22:01:41.487612 waagent[1540]: 2023-10-02T22:01:41.487551Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 22:01:41.488021 waagent[1540]: 2023-10-02T22:01:41.487962Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 22:01:41.498821 waagent[1540]: 2023-10-02T22:01:41.498757Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 22:01:41.499318 waagent[1540]: 2023-10-02T22:01:41.499261Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 22:01:41.507660 waagent[1540]: 2023-10-02T22:01:41.507548Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. Oct 2 22:01:41.511311 waagent[1540]: 2023-10-02T22:01:41.511251Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 22:01:41.512819 waagent[1540]: 2023-10-02T22:01:41.512747Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 22:01:41.513455 waagent[1540]: 2023-10-02T22:01:41.513398Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 22:01:41.513702 waagent[1540]: 2023-10-02T22:01:41.513654Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 22:01:41.514390 waagent[1540]: 2023-10-02T22:01:41.514322Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 22:01:41.515078 waagent[1540]: 2023-10-02T22:01:41.515003Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 22:01:41.515717 waagent[1540]: 2023-10-02T22:01:41.515593Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 22:01:41.515789 waagent[1540]: 2023-10-02T22:01:41.515723Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 22:01:41.516100 waagent[1540]: 2023-10-02T22:01:41.516029Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 22:01:41.516335 waagent[1540]: 2023-10-02T22:01:41.516270Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 22:01:41.516335 waagent[1540]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 22:01:41.516335 waagent[1540]: eth0 00000000 0114C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 22:01:41.516335 waagent[1540]: eth0 0014C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 22:01:41.516335 waagent[1540]: eth0 0114C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 22:01:41.516335 waagent[1540]: eth0 10813FA8 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 22:01:41.516335 waagent[1540]: eth0 FEA9FEA9 0114C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 22:01:41.516497 waagent[1540]: 2023-10-02T22:01:41.516372Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 22:01:41.516846 waagent[1540]: 2023-10-02T22:01:41.516780Z INFO EnvHandler ExtHandler Configure routes Oct 2 22:01:41.517696 waagent[1540]: 2023-10-02T22:01:41.517617Z INFO EnvHandler ExtHandler Gateway:None Oct 2 22:01:41.520101 waagent[1540]: 2023-10-02T22:01:41.519924Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 22:01:41.520256 waagent[1540]: 2023-10-02T22:01:41.520179Z INFO EnvHandler ExtHandler Routes:None Oct 2 22:01:41.520579 waagent[1540]: 2023-10-02T22:01:41.520495Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 22:01:41.520928 waagent[1540]: 2023-10-02T22:01:41.520840Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 22:01:41.538503 waagent[1540]: 2023-10-02T22:01:41.538245Z INFO ExtHandler ExtHandler No requested version specified, checking for all versions for agent update (family: Prod) Oct 2 22:01:41.539899 waagent[1540]: 2023-10-02T22:01:41.539827Z INFO ExtHandler ExtHandler Downloading manifest Oct 2 22:01:41.552060 waagent[1540]: 2023-10-02T22:01:41.551929Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 22:01:41.552060 waagent[1540]: Executing ['ip', '-a', '-o', 'link']: Oct 2 22:01:41.552060 waagent[1540]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 22:01:41.552060 waagent[1540]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:b3:c4:9b brd ff:ff:ff:ff:ff:ff Oct 2 22:01:41.552060 waagent[1540]: 3: enP22357s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:b3:c4:9b brd ff:ff:ff:ff:ff:ff\ altname enP22357p0s2 Oct 2 22:01:41.552060 waagent[1540]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 22:01:41.552060 waagent[1540]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 22:01:41.552060 waagent[1540]: 2: eth0 inet 10.200.20.17/24 metric 1024 brd 10.200.20.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 22:01:41.552060 waagent[1540]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 22:01:41.552060 waagent[1540]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 22:01:41.552060 waagent[1540]: 2: eth0 inet6 fe80::222:48ff:feb3:c49b/64 scope link \ valid_lft forever preferred_lft forever Oct 2 22:01:41.579101 waagent[1540]: 2023-10-02T22:01:41.579035Z INFO ExtHandler ExtHandler Oct 2 22:01:41.579251 waagent[1540]: 2023-10-02T22:01:41.579197Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: f15edc60-84f5-4e92-9b4d-0b2e8b1eb688 correlation 83339056-4143-45f9-8761-af895d7ed54b created: 2023-10-02T21:59:46.716698Z] Oct 2 22:01:41.580333 waagent[1540]: 2023-10-02T22:01:41.580274Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 22:01:41.582187 waagent[1540]: 2023-10-02T22:01:41.582132Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 3 ms] Oct 2 22:01:41.603070 waagent[1540]: 2023-10-02T22:01:41.603001Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 22:01:41.630618 waagent[1540]: 2023-10-02T22:01:41.630503Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.9.1.1 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: B480BA8E-B0A7-4956-A411-A1C785319536;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 22:01:41.809508 waagent[1540]: 2023-10-02T22:01:41.809341Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules. Current Firewall rules: Oct 2 22:01:41.809508 waagent[1540]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 22:01:41.809508 waagent[1540]: pkts bytes target prot opt in out source destination Oct 2 22:01:41.809508 waagent[1540]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 22:01:41.809508 waagent[1540]: pkts bytes target prot opt in out source destination Oct 2 22:01:41.809508 waagent[1540]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 22:01:41.809508 waagent[1540]: pkts bytes target prot opt in out source destination Oct 2 22:01:41.809508 waagent[1540]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 22:01:41.809508 waagent[1540]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 22:01:41.809508 waagent[1540]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 22:01:41.818746 waagent[1540]: 2023-10-02T22:01:41.818642Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 22:01:41.818746 waagent[1540]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 22:01:41.818746 waagent[1540]: pkts bytes target prot opt in out source destination Oct 2 22:01:41.818746 waagent[1540]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 22:01:41.818746 waagent[1540]: pkts bytes target prot opt in out source destination Oct 2 22:01:41.818746 waagent[1540]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 22:01:41.818746 waagent[1540]: pkts bytes target prot opt in out source destination Oct 2 22:01:41.818746 waagent[1540]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 22:01:41.818746 waagent[1540]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 22:01:41.818746 waagent[1540]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 22:01:41.819616 waagent[1540]: 2023-10-02T22:01:41.819571Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 22:02:03.048513 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Oct 2 22:02:11.633347 update_engine[1338]: I1002 22:02:11.632999 1338 update_attempter.cc:505] Updating boot flags... Oct 2 22:02:23.668115 systemd[1]: Created slice system-sshd.slice. Oct 2 22:02:23.669415 systemd[1]: Started sshd@0-10.200.20.17:22-10.200.12.6:50346.service. Oct 2 22:02:24.305914 sshd[1631]: Accepted publickey for core from 10.200.12.6 port 50346 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:02:24.325007 sshd[1631]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:02:24.328708 systemd-logind[1336]: New session 3 of user core. Oct 2 22:02:24.329440 systemd[1]: Started session-3.scope. Oct 2 22:02:24.670107 systemd[1]: Started sshd@1-10.200.20.17:22-10.200.12.6:50360.service. Oct 2 22:02:25.109053 sshd[1636]: Accepted publickey for core from 10.200.12.6 port 50360 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:02:25.110757 sshd[1636]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:02:25.114683 systemd-logind[1336]: New session 4 of user core. Oct 2 22:02:25.115108 systemd[1]: Started session-4.scope. Oct 2 22:02:25.428432 sshd[1636]: pam_unix(sshd:session): session closed for user core Oct 2 22:02:25.431197 systemd-logind[1336]: Session 4 logged out. Waiting for processes to exit. Oct 2 22:02:25.431270 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 22:02:25.432166 systemd[1]: sshd@1-10.200.20.17:22-10.200.12.6:50360.service: Deactivated successfully. Oct 2 22:02:25.433100 systemd-logind[1336]: Removed session 4. Oct 2 22:02:25.501638 systemd[1]: Started sshd@2-10.200.20.17:22-10.200.12.6:50376.service. Oct 2 22:02:25.940928 sshd[1642]: Accepted publickey for core from 10.200.12.6 port 50376 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:02:25.942601 sshd[1642]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:02:25.946585 systemd-logind[1336]: New session 5 of user core. Oct 2 22:02:25.947027 systemd[1]: Started session-5.scope. Oct 2 22:02:26.254375 sshd[1642]: pam_unix(sshd:session): session closed for user core Oct 2 22:02:26.257013 systemd[1]: sshd@2-10.200.20.17:22-10.200.12.6:50376.service: Deactivated successfully. Oct 2 22:02:26.257644 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 22:02:26.258175 systemd-logind[1336]: Session 5 logged out. Waiting for processes to exit. Oct 2 22:02:26.258975 systemd-logind[1336]: Removed session 5. Oct 2 22:02:26.320640 systemd[1]: Started sshd@3-10.200.20.17:22-10.200.12.6:50378.service. Oct 2 22:02:26.721714 sshd[1648]: Accepted publickey for core from 10.200.12.6 port 50378 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:02:26.723312 sshd[1648]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:02:26.726991 systemd-logind[1336]: New session 6 of user core. Oct 2 22:02:26.727564 systemd[1]: Started session-6.scope. Oct 2 22:02:27.016420 sshd[1648]: pam_unix(sshd:session): session closed for user core Oct 2 22:02:27.019291 systemd-logind[1336]: Session 6 logged out. Waiting for processes to exit. Oct 2 22:02:27.019368 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 22:02:27.020167 systemd[1]: sshd@3-10.200.20.17:22-10.200.12.6:50378.service: Deactivated successfully. Oct 2 22:02:27.021055 systemd-logind[1336]: Removed session 6. Oct 2 22:02:27.085182 systemd[1]: Started sshd@4-10.200.20.17:22-10.200.12.6:50392.service. Oct 2 22:02:27.484461 sshd[1654]: Accepted publickey for core from 10.200.12.6 port 50392 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:02:27.486041 sshd[1654]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:02:27.489864 systemd-logind[1336]: New session 7 of user core. Oct 2 22:02:27.490306 systemd[1]: Started session-7.scope. Oct 2 22:02:28.024034 sudo[1657]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 22:02:28.024534 sudo[1657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 22:02:28.081138 dbus-daemon[1324]: avc: received setenforce notice (enforcing=1) Oct 2 22:02:28.082885 sudo[1657]: pam_unix(sudo:session): session closed for user root Oct 2 22:02:28.165640 sshd[1654]: pam_unix(sshd:session): session closed for user core Oct 2 22:02:28.168765 systemd-logind[1336]: Session 7 logged out. Waiting for processes to exit. Oct 2 22:02:28.168882 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 22:02:28.169432 systemd[1]: sshd@4-10.200.20.17:22-10.200.12.6:50392.service: Deactivated successfully. Oct 2 22:02:28.170425 systemd-logind[1336]: Removed session 7. Oct 2 22:02:28.239275 systemd[1]: Started sshd@5-10.200.20.17:22-10.200.12.6:52114.service. Oct 2 22:02:28.682486 sshd[1661]: Accepted publickey for core from 10.200.12.6 port 52114 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:02:28.684188 sshd[1661]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:02:28.688184 systemd-logind[1336]: New session 8 of user core. Oct 2 22:02:28.688595 systemd[1]: Started session-8.scope. Oct 2 22:02:28.935282 sudo[1665]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 22:02:28.935474 sudo[1665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 22:02:28.938766 sudo[1665]: pam_unix(sudo:session): session closed for user root Oct 2 22:02:28.944571 sudo[1664]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 22:02:28.945023 sudo[1664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 22:02:28.955801 systemd[1]: Stopping audit-rules.service... Oct 2 22:02:28.956000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 22:02:28.961739 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 22:02:28.961797 kernel: audit: type=1305 audit(1696284148.956:175): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 22:02:28.972843 auditctl[1668]: No rules Oct 2 22:02:28.956000 audit[1668]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffee49f370 a2=420 a3=0 items=0 ppid=1 pid=1668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:28.973427 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 22:02:28.973593 systemd[1]: Stopped audit-rules.service. Oct 2 22:02:28.975167 systemd[1]: Starting audit-rules.service... Oct 2 22:02:28.996500 kernel: audit: type=1300 audit(1696284148.956:175): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffee49f370 a2=420 a3=0 items=0 ppid=1 pid=1668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:28.956000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 22:02:29.003837 kernel: audit: type=1327 audit(1696284148.956:175): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 22:02:29.003926 kernel: audit: type=1131 audit(1696284148.972:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:28.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:29.031412 augenrules[1685]: No rules Oct 2 22:02:29.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:29.032055 systemd[1]: Finished audit-rules.service. Oct 2 22:02:29.049634 sudo[1664]: pam_unix(sudo:session): session closed for user root Oct 2 22:02:29.049000 audit[1664]: USER_END pid=1664 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:29.073575 kernel: audit: type=1130 audit(1696284149.031:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:29.073677 kernel: audit: type=1106 audit(1696284149.049:178): pid=1664 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:29.073706 kernel: audit: type=1104 audit(1696284149.049:179): pid=1664 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:29.049000 audit[1664]: CRED_DISP pid=1664 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:29.118831 sshd[1661]: pam_unix(sshd:session): session closed for user core Oct 2 22:02:29.118000 audit[1661]: USER_END pid=1661 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:29.142476 systemd[1]: sshd@5-10.200.20.17:22-10.200.12.6:52114.service: Deactivated successfully. Oct 2 22:02:29.119000 audit[1661]: CRED_DISP pid=1661 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:29.160197 kernel: audit: type=1106 audit(1696284149.118:180): pid=1661 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:29.160269 kernel: audit: type=1104 audit(1696284149.119:181): pid=1661 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:29.143179 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 22:02:29.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.17:22-10.200.12.6:52114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:29.160832 systemd-logind[1336]: Session 8 logged out. Waiting for processes to exit. Oct 2 22:02:29.179226 kernel: audit: type=1131 audit(1696284149.142:182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.20.17:22-10.200.12.6:52114 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:29.179722 systemd-logind[1336]: Removed session 8. Oct 2 22:02:29.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.17:22-10.200.12.6:52126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:29.185313 systemd[1]: Started sshd@6-10.200.20.17:22-10.200.12.6:52126.service. Oct 2 22:02:29.586000 audit[1691]: USER_ACCT pid=1691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:29.587777 sshd[1691]: Accepted publickey for core from 10.200.12.6 port 52126 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:02:29.588000 audit[1691]: CRED_ACQ pid=1691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:29.588000 audit[1691]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffccc73b00 a2=3 a3=1 items=0 ppid=1 pid=1691 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:29.588000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:02:29.589880 sshd[1691]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:02:29.594158 systemd[1]: Started session-9.scope. Oct 2 22:02:29.594571 systemd-logind[1336]: New session 9 of user core. Oct 2 22:02:29.597000 audit[1691]: USER_START pid=1691 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:29.599000 audit[1693]: CRED_ACQ pid=1693 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:02:29.818000 audit[1694]: USER_ACCT pid=1694 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:29.820125 sudo[1694]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 22:02:29.819000 audit[1694]: CRED_REFR pid=1694 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:29.820616 sudo[1694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 22:02:29.821000 audit[1694]: USER_START pid=1694 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:02:30.524896 systemd[1]: Starting docker.service... Oct 2 22:02:30.569172 env[1709]: time="2023-10-02T22:02:30.569115957Z" level=info msg="Starting up" Oct 2 22:02:30.570708 env[1709]: time="2023-10-02T22:02:30.570679731Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 22:02:30.570808 env[1709]: time="2023-10-02T22:02:30.570794773Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 22:02:30.570878 env[1709]: time="2023-10-02T22:02:30.570863013Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 22:02:30.570926 env[1709]: time="2023-10-02T22:02:30.570914294Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 22:02:30.573742 env[1709]: time="2023-10-02T22:02:30.573712639Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 22:02:30.573742 env[1709]: time="2023-10-02T22:02:30.573734559Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 22:02:30.573859 env[1709]: time="2023-10-02T22:02:30.573749960Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 22:02:30.573859 env[1709]: time="2023-10-02T22:02:30.573764600Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 22:02:30.578895 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2492619702-merged.mount: Deactivated successfully. Oct 2 22:02:30.674646 env[1709]: time="2023-10-02T22:02:30.674604323Z" level=info msg="Loading containers: start." Oct 2 22:02:30.801000 audit[1737]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=1737 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:30.801000 audit[1737]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffff55d2120 a2=0 a3=1 items=0 ppid=1709 pid=1737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:30.801000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 22:02:30.804000 audit[1739]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=1739 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:30.804000 audit[1739]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc4df1e40 a2=0 a3=1 items=0 ppid=1709 pid=1739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:30.804000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 22:02:30.807000 audit[1741]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=1741 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:30.807000 audit[1741]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff586daf0 a2=0 a3=1 items=0 ppid=1709 pid=1741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:30.807000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 22:02:30.810000 audit[1743]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1743 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:30.810000 audit[1743]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff13073d0 a2=0 a3=1 items=0 ppid=1709 pid=1743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:30.810000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 22:02:30.813000 audit[1745]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1745 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:30.813000 audit[1745]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff78f2a70 a2=0 a3=1 items=0 ppid=1709 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:30.813000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 22:02:30.816000 audit[1747]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1747 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:30.816000 audit[1747]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff0d72860 a2=0 a3=1 items=0 ppid=1709 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:30.816000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 22:02:30.831000 audit[1749]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=1749 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:30.831000 audit[1749]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe544a660 a2=0 a3=1 items=0 ppid=1709 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:30.831000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 22:02:30.834000 audit[1751]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1751 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:30.834000 audit[1751]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffdb5936c0 a2=0 a3=1 items=0 ppid=1709 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:30.834000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 22:02:30.837000 audit[1753]: NETFILTER_CFG table=filter:13 family=2 entries=2 op=nft_register_chain pid=1753 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:30.837000 audit[1753]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffe5e439d0 a2=0 a3=1 items=0 ppid=1709 pid=1753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:30.837000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 22:02:30.855000 audit[1757]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_unregister_rule pid=1757 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:30.855000 audit[1757]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffee9ee7e0 a2=0 a3=1 items=0 ppid=1709 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:30.855000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 22:02:30.856000 audit[1758]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1758 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:30.856000 audit[1758]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffcf47ae80 a2=0 a3=1 items=0 ppid=1709 pid=1758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:30.856000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 22:02:30.899972 kernel: Initializing XFRM netlink socket Oct 2 22:02:30.929082 env[1709]: time="2023-10-02T22:02:30.929050774Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 22:02:31.021000 audit[1766]: NETFILTER_CFG table=nat:16 family=2 entries=2 op=nft_register_chain pid=1766 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:31.021000 audit[1766]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffdfd25640 a2=0 a3=1 items=0 ppid=1709 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:31.021000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 22:02:31.047000 audit[1769]: NETFILTER_CFG table=nat:17 family=2 entries=1 op=nft_register_rule pid=1769 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:31.047000 audit[1769]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffe6eab810 a2=0 a3=1 items=0 ppid=1709 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:31.047000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 22:02:31.051000 audit[1772]: NETFILTER_CFG table=filter:18 family=2 entries=1 op=nft_register_rule pid=1772 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:31.051000 audit[1772]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc9829750 a2=0 a3=1 items=0 ppid=1709 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:31.051000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 22:02:31.054000 audit[1774]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:31.054000 audit[1774]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffea805100 a2=0 a3=1 items=0 ppid=1709 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:31.054000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 22:02:31.058000 audit[1776]: NETFILTER_CFG table=nat:20 family=2 entries=2 op=nft_register_chain pid=1776 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:31.058000 audit[1776]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffff64079a0 a2=0 a3=1 items=0 ppid=1709 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:31.058000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 22:02:31.061000 audit[1778]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1778 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:31.061000 audit[1778]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffe8137ca0 a2=0 a3=1 items=0 ppid=1709 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:31.061000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 22:02:31.064000 audit[1780]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1780 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:31.064000 audit[1780]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffdc76d7e0 a2=0 a3=1 items=0 ppid=1709 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:31.064000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 22:02:31.067000 audit[1782]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1782 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:31.067000 audit[1782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffc5059010 a2=0 a3=1 items=0 ppid=1709 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:31.067000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 22:02:31.070000 audit[1784]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1784 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:31.070000 audit[1784]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffd8144740 a2=0 a3=1 items=0 ppid=1709 pid=1784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:31.070000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 22:02:31.073000 audit[1786]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1786 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:31.073000 audit[1786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffc9f248b0 a2=0 a3=1 items=0 ppid=1709 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:31.073000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 22:02:31.076000 audit[1788]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1788 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:31.076000 audit[1788]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff78f4ac0 a2=0 a3=1 items=0 ppid=1709 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:31.076000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 22:02:31.077906 systemd-networkd[1499]: docker0: Link UP Oct 2 22:02:31.094000 audit[1792]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_unregister_rule pid=1792 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:31.094000 audit[1792]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffec30c350 a2=0 a3=1 items=0 ppid=1709 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:31.094000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 22:02:31.096000 audit[1793]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_rule pid=1793 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:02:31.096000 audit[1793]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe5ccce60 a2=0 a3=1 items=0 ppid=1709 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:02:31.096000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 22:02:31.097414 env[1709]: time="2023-10-02T22:02:31.097387893Z" level=info msg="Loading containers: done." Oct 2 22:02:31.110206 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3377080178-merged.mount: Deactivated successfully. Oct 2 22:02:31.133300 env[1709]: time="2023-10-02T22:02:31.133262893Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 22:02:31.133644 env[1709]: time="2023-10-02T22:02:31.133627616Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 22:02:31.133805 env[1709]: time="2023-10-02T22:02:31.133790778Z" level=info msg="Daemon has completed initialization" Oct 2 22:02:31.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:31.163532 systemd[1]: Started docker.service. Oct 2 22:02:31.170837 env[1709]: time="2023-10-02T22:02:31.170742787Z" level=info msg="API listen on /run/docker.sock" Oct 2 22:02:31.193845 systemd[1]: Reloading. Oct 2 22:02:31.297448 /usr/lib/systemd/system-generators/torcx-generator[1838]: time="2023-10-02T22:02:31Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 22:02:31.297477 /usr/lib/systemd/system-generators/torcx-generator[1838]: time="2023-10-02T22:02:31Z" level=info msg="torcx already run" Oct 2 22:02:31.378768 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 22:02:31.378788 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 22:02:31.394979 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit: BPF prog-id=38 op=LOAD Oct 2 22:02:31.466000 audit: BPF prog-id=21 op=UNLOAD Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit: BPF prog-id=39 op=LOAD Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.466000 audit: BPF prog-id=40 op=LOAD Oct 2 22:02:31.466000 audit: BPF prog-id=22 op=UNLOAD Oct 2 22:02:31.466000 audit: BPF prog-id=23 op=UNLOAD Oct 2 22:02:31.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.467000 audit: BPF prog-id=41 op=LOAD Oct 2 22:02:31.467000 audit: BPF prog-id=37 op=UNLOAD Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit: BPF prog-id=42 op=LOAD Oct 2 22:02:31.468000 audit: BPF prog-id=32 op=UNLOAD Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit: BPF prog-id=43 op=LOAD Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.468000 audit: BPF prog-id=44 op=LOAD Oct 2 22:02:31.468000 audit: BPF prog-id=33 op=UNLOAD Oct 2 22:02:31.468000 audit: BPF prog-id=34 op=UNLOAD Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit: BPF prog-id=45 op=LOAD Oct 2 22:02:31.469000 audit: BPF prog-id=27 op=UNLOAD Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit: BPF prog-id=46 op=LOAD Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.469000 audit: BPF prog-id=47 op=LOAD Oct 2 22:02:31.469000 audit: BPF prog-id=28 op=UNLOAD Oct 2 22:02:31.469000 audit: BPF prog-id=29 op=UNLOAD Oct 2 22:02:31.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.470000 audit: BPF prog-id=48 op=LOAD Oct 2 22:02:31.470000 audit: BPF prog-id=35 op=UNLOAD Oct 2 22:02:31.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.471000 audit: BPF prog-id=49 op=LOAD Oct 2 22:02:31.471000 audit: BPF prog-id=30 op=UNLOAD Oct 2 22:02:31.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.474000 audit: BPF prog-id=50 op=LOAD Oct 2 22:02:31.474000 audit: BPF prog-id=31 op=UNLOAD Oct 2 22:02:31.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit: BPF prog-id=51 op=LOAD Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:02:31.475000 audit: BPF prog-id=52 op=LOAD Oct 2 22:02:31.475000 audit: BPF prog-id=24 op=UNLOAD Oct 2 22:02:31.475000 audit: BPF prog-id=25 op=UNLOAD Oct 2 22:02:31.481000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:31.482409 systemd[1]: Started kubelet.service. Oct 2 22:02:31.569320 kubelet[1897]: E1002 22:02:31.569264 1897 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 22:02:31.571738 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 22:02:31.571000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 22:02:31.571856 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 22:02:36.329810 env[1354]: time="2023-10-02T22:02:36.329722671Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 22:02:37.320199 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3550131939.mount: Deactivated successfully. Oct 2 22:02:40.521858 env[1354]: time="2023-10-02T22:02:40.521798504Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:40.526410 env[1354]: time="2023-10-02T22:02:40.526373936Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:40.529210 env[1354]: time="2023-10-02T22:02:40.529177555Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:40.532889 env[1354]: time="2023-10-02T22:02:40.532862621Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:40.533616 env[1354]: time="2023-10-02T22:02:40.533588706Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:84fc12f356926a06f93f99d06ff6b5c8df1d39c609ddaae4aaf09048dc816c36\"" Oct 2 22:02:40.547477 env[1354]: time="2023-10-02T22:02:40.547439203Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 22:02:41.789807 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 22:02:41.790063 systemd[1]: Stopped kubelet.service. Oct 2 22:02:41.791877 systemd[1]: Started kubelet.service. Oct 2 22:02:41.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:41.796089 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 22:02:41.796169 kernel: audit: type=1130 audit(1696284161.789:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:41.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:41.829609 kernel: audit: type=1131 audit(1696284161.789:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:41.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:41.848583 kernel: audit: type=1130 audit(1696284161.791:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:41.890091 kubelet[1920]: E1002 22:02:41.890047 1920 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 22:02:41.892799 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 22:02:41.892928 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 22:02:41.892000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 22:02:41.914963 kernel: audit: type=1131 audit(1696284161.892:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 22:02:43.605257 env[1354]: time="2023-10-02T22:02:43.605149219Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:43.610778 env[1354]: time="2023-10-02T22:02:43.610740575Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:43.614934 env[1354]: time="2023-10-02T22:02:43.614899122Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:43.618454 env[1354]: time="2023-10-02T22:02:43.618425905Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:43.619160 env[1354]: time="2023-10-02T22:02:43.619133110Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:66b19e3051492d4e2377e15803f07d9bd2a4578c7e26e5fa088582d59e08884b\"" Oct 2 22:02:43.633553 env[1354]: time="2023-10-02T22:02:43.633509763Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 22:02:45.875015 env[1354]: time="2023-10-02T22:02:45.874967368Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:45.882092 env[1354]: time="2023-10-02T22:02:45.882052052Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:45.886840 env[1354]: time="2023-10-02T22:02:45.886807161Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:45.890572 env[1354]: time="2023-10-02T22:02:45.890542064Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:45.891045 env[1354]: time="2023-10-02T22:02:45.891015627Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:1faa1d898c625343f7c70abbc8e9d160eb6dc3002ec2481cf8f4abd61dc34eed\"" Oct 2 22:02:45.906115 env[1354]: time="2023-10-02T22:02:45.906082040Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 22:02:47.211019 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount973252389.mount: Deactivated successfully. Oct 2 22:02:47.827094 env[1354]: time="2023-10-02T22:02:47.826477981Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:47.832049 env[1354]: time="2023-10-02T22:02:47.832011134Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:47.838019 env[1354]: time="2023-10-02T22:02:47.837993289Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:47.842644 env[1354]: time="2023-10-02T22:02:47.842617316Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:47.843154 env[1354]: time="2023-10-02T22:02:47.843129239Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:95195e68173b6cfcdd3125d7bbffa6759189df53b60ffe7a72256059cd5dd7af\"" Oct 2 22:02:47.865444 env[1354]: time="2023-10-02T22:02:47.865377849Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 22:02:48.893758 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2550659672.mount: Deactivated successfully. Oct 2 22:02:48.916542 env[1354]: time="2023-10-02T22:02:48.916491272Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:48.924406 env[1354]: time="2023-10-02T22:02:48.924363677Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:48.928420 env[1354]: time="2023-10-02T22:02:48.928393260Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:48.933106 env[1354]: time="2023-10-02T22:02:48.933066886Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:48.933767 env[1354]: time="2023-10-02T22:02:48.933740570Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Oct 2 22:02:48.946830 env[1354]: time="2023-10-02T22:02:48.946798405Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 22:02:49.872888 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount472504805.mount: Deactivated successfully. Oct 2 22:02:52.039688 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 22:02:52.039869 systemd[1]: Stopped kubelet.service. Oct 2 22:02:52.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:52.041324 systemd[1]: Started kubelet.service. Oct 2 22:02:52.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:52.077876 kernel: audit: type=1130 audit(1696284172.039:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:52.078029 kernel: audit: type=1131 audit(1696284172.039:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:52.078057 kernel: audit: type=1130 audit(1696284172.040:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:52.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:02:52.148330 kubelet[1946]: E1002 22:02:52.148292 1946 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 22:02:52.150258 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 22:02:52.149000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 22:02:52.150374 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 22:02:52.170135 kernel: audit: type=1131 audit(1696284172.149:398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 22:02:56.224937 env[1354]: time="2023-10-02T22:02:56.224878271Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:56.233746 env[1354]: time="2023-10-02T22:02:56.233707952Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:56.238420 env[1354]: time="2023-10-02T22:02:56.238370854Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:56.242684 env[1354]: time="2023-10-02T22:02:56.242638754Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:56.243404 env[1354]: time="2023-10-02T22:02:56.243372558Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\"" Oct 2 22:02:56.257360 env[1354]: time="2023-10-02T22:02:56.257305543Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 22:02:56.980775 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3992670897.mount: Deactivated successfully. Oct 2 22:02:57.528928 env[1354]: time="2023-10-02T22:02:57.528877311Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:57.534453 env[1354]: time="2023-10-02T22:02:57.534408137Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:57.537719 env[1354]: time="2023-10-02T22:02:57.537692992Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:57.540015 env[1354]: time="2023-10-02T22:02:57.539982922Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:02:57.540640 env[1354]: time="2023-10-02T22:02:57.540611085Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Oct 2 22:03:02.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:03:02.289691 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Oct 2 22:03:02.288000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:03:02.289862 systemd[1]: Stopped kubelet.service. Oct 2 22:03:02.320619 systemd[1]: Started kubelet.service. Oct 2 22:03:02.326962 kernel: audit: type=1130 audit(1696284182.288:399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:03:02.327030 kernel: audit: type=1131 audit(1696284182.288:400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:03:02.325000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:03:02.350628 kernel: audit: type=1130 audit(1696284182.325:401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:03:02.420879 kubelet[2016]: E1002 22:03:02.420826 2016 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 22:03:02.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 22:03:02.422959 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 22:03:02.423084 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 22:03:02.440994 kernel: audit: type=1131 audit(1696284182.422:402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 22:03:03.571313 systemd[1]: Stopped kubelet.service. Oct 2 22:03:03.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:03:03.570000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:03:03.609070 kernel: audit: type=1130 audit(1696284183.570:403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:03:03.609170 kernel: audit: type=1131 audit(1696284183.570:404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:03:03.630496 systemd[1]: Reloading. Oct 2 22:03:03.711261 /usr/lib/systemd/system-generators/torcx-generator[2046]: time="2023-10-02T22:03:03Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 22:03:03.711574 /usr/lib/systemd/system-generators/torcx-generator[2046]: time="2023-10-02T22:03:03Z" level=info msg="torcx already run" Oct 2 22:03:03.823390 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 22:03:03.823597 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 22:03:03.838753 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 22:03:03.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.929559 kernel: audit: type=1400 audit(1696284183.903:405): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.929665 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 22:03:03.929710 kernel: audit: type=1400 audit(1696284183.903:406): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.947532 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 22:03:03.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit: BPF prog-id=53 op=LOAD Oct 2 22:03:03.921000 audit: BPF prog-id=38 op=UNLOAD Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit: BPF prog-id=54 op=LOAD Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit: BPF prog-id=55 op=LOAD Oct 2 22:03:03.921000 audit: BPF prog-id=39 op=UNLOAD Oct 2 22:03:03.921000 audit: BPF prog-id=40 op=UNLOAD Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.921000 audit: BPF prog-id=56 op=LOAD Oct 2 22:03:03.921000 audit: BPF prog-id=41 op=UNLOAD Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit: BPF prog-id=57 op=LOAD Oct 2 22:03:03.922000 audit: BPF prog-id=42 op=UNLOAD Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.953000 audit: BPF prog-id=58 op=LOAD Oct 2 22:03:03.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.953000 audit: BPF prog-id=59 op=LOAD Oct 2 22:03:03.953000 audit: BPF prog-id=43 op=UNLOAD Oct 2 22:03:03.953000 audit: BPF prog-id=44 op=UNLOAD Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit: BPF prog-id=60 op=LOAD Oct 2 22:03:03.954000 audit: BPF prog-id=45 op=UNLOAD Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit: BPF prog-id=61 op=LOAD Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.954000 audit: BPF prog-id=62 op=LOAD Oct 2 22:03:03.954000 audit: BPF prog-id=46 op=UNLOAD Oct 2 22:03:03.954000 audit: BPF prog-id=47 op=UNLOAD Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit: BPF prog-id=63 op=LOAD Oct 2 22:03:03.955000 audit: BPF prog-id=48 op=UNLOAD Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.956000 audit: BPF prog-id=64 op=LOAD Oct 2 22:03:03.956000 audit: BPF prog-id=49 op=UNLOAD Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit: BPF prog-id=65 op=LOAD Oct 2 22:03:03.959000 audit: BPF prog-id=50 op=UNLOAD Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit: BPF prog-id=66 op=LOAD Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:03.959000 audit: BPF prog-id=67 op=LOAD Oct 2 22:03:03.959000 audit: BPF prog-id=51 op=UNLOAD Oct 2 22:03:03.959000 audit: BPF prog-id=52 op=UNLOAD Oct 2 22:03:03.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:03:03.976038 systemd[1]: Started kubelet.service. Oct 2 22:03:04.044634 kubelet[2106]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 22:03:04.044905 kubelet[2106]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 22:03:04.044975 kubelet[2106]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 22:03:04.045153 kubelet[2106]: I1002 22:03:04.045121 2106 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 22:03:04.765290 kubelet[2106]: I1002 22:03:04.765261 2106 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 22:03:04.765454 kubelet[2106]: I1002 22:03:04.765444 2106 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 22:03:04.765720 kubelet[2106]: I1002 22:03:04.765706 2106 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 22:03:04.771619 kubelet[2106]: W1002 22:03:04.771599 2106 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 22:03:04.771862 kubelet[2106]: E1002 22:03:04.771829 2106 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.20.17:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:04.771911 kubelet[2106]: I1002 22:03:04.771903 2106 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 22:03:04.772336 kubelet[2106]: I1002 22:03:04.772320 2106 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 22:03:04.772673 kubelet[2106]: I1002 22:03:04.772660 2106 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 22:03:04.772806 kubelet[2106]: I1002 22:03:04.772795 2106 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 22:03:04.772969 kubelet[2106]: I1002 22:03:04.772940 2106 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 22:03:04.773042 kubelet[2106]: I1002 22:03:04.773032 2106 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 22:03:04.773175 kubelet[2106]: I1002 22:03:04.773165 2106 state_mem.go:36] "Initialized new in-memory state store" Oct 2 22:03:04.776039 kubelet[2106]: I1002 22:03:04.776014 2106 kubelet.go:405] "Attempting to sync node with API server" Oct 2 22:03:04.776039 kubelet[2106]: I1002 22:03:04.776042 2106 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 22:03:04.776129 kubelet[2106]: I1002 22:03:04.776114 2106 kubelet.go:309] "Adding apiserver pod source" Oct 2 22:03:04.776168 kubelet[2106]: I1002 22:03:04.776152 2106 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 22:03:04.781097 kubelet[2106]: I1002 22:03:04.781078 2106 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 22:03:04.781267 kubelet[2106]: W1002 22:03:04.781236 2106 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-176754823f&limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:04.781362 kubelet[2106]: E1002 22:03:04.781351 2106 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-176754823f&limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:04.781482 kubelet[2106]: W1002 22:03:04.781458 2106 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.17:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:04.781551 kubelet[2106]: E1002 22:03:04.781542 2106 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.17:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:04.781600 kubelet[2106]: W1002 22:03:04.781516 2106 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 22:03:04.782200 kubelet[2106]: I1002 22:03:04.782183 2106 server.go:1168] "Started kubelet" Oct 2 22:03:04.782456 kubelet[2106]: I1002 22:03:04.782430 2106 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 22:03:04.782617 kubelet[2106]: I1002 22:03:04.782601 2106 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 22:03:04.783098 kubelet[2106]: I1002 22:03:04.783066 2106 server.go:461] "Adding debug handlers to kubelet server" Oct 2 22:03:04.783350 kubelet[2106]: E1002 22:03:04.783273 2106 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-176754823f.178a697a900dccb9", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-176754823f", UID:"ci-3510.3.0-a-176754823f", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-176754823f"}, FirstTimestamp:time.Date(2023, time.October, 2, 22, 3, 4, 782163129, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 22, 3, 4, 782163129, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.20.17:6443/api/v1/namespaces/default/events": dial tcp 10.200.20.17:6443: connect: connection refused'(may retry after sleeping) Oct 2 22:03:04.784334 kubelet[2106]: E1002 22:03:04.784302 2106 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 22:03:04.784334 kubelet[2106]: E1002 22:03:04.784332 2106 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 22:03:04.783000 audit[2106]: AVC avc: denied { mac_admin } for pid=2106 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:04.783000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 22:03:04.783000 audit[2106]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000de1bf0 a1=4000dbeba0 a2=4000de1bc0 a3=25 items=0 ppid=1 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:04.783000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 22:03:04.785068 kubelet[2106]: I1002 22:03:04.785050 2106 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 22:03:04.784000 audit[2106]: AVC avc: denied { mac_admin } for pid=2106 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:04.784000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 22:03:04.784000 audit[2106]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000de2fe0 a1=4000dbebb8 a2=4000de1c80 a3=25 items=0 ppid=1 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:04.784000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 22:03:04.785304 kubelet[2106]: I1002 22:03:04.785291 2106 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 22:03:04.785430 kubelet[2106]: I1002 22:03:04.785420 2106 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 22:03:04.787472 kubelet[2106]: I1002 22:03:04.787446 2106 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 22:03:04.788582 kubelet[2106]: I1002 22:03:04.788556 2106 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 22:03:04.788878 kubelet[2106]: W1002 22:03:04.788833 2106 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:04.788878 kubelet[2106]: E1002 22:03:04.788874 2106 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:04.788988 kubelet[2106]: E1002 22:03:04.788907 2106 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-176754823f\" not found" Oct 2 22:03:04.789142 kubelet[2106]: E1002 22:03:04.789110 2106 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-176754823f?timeout=10s\": dial tcp 10.200.20.17:6443: connect: connection refused" interval="200ms" Oct 2 22:03:04.788000 audit[2116]: NETFILTER_CFG table=mangle:29 family=2 entries=2 op=nft_register_chain pid=2116 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:04.788000 audit[2116]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe16d7f20 a2=0 a3=1 items=0 ppid=2106 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:04.788000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 22:03:04.790000 audit[2117]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_chain pid=2117 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:04.790000 audit[2117]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe1312810 a2=0 a3=1 items=0 ppid=2106 pid=2117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:04.790000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 22:03:04.793000 audit[2119]: NETFILTER_CFG table=filter:31 family=2 entries=2 op=nft_register_chain pid=2119 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:04.793000 audit[2119]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe1b39370 a2=0 a3=1 items=0 ppid=2106 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:04.793000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 22:03:04.808000 audit[2123]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2123 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:04.808000 audit[2123]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc75b26d0 a2=0 a3=1 items=0 ppid=2106 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:04.808000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 22:03:04.846387 kubelet[2106]: I1002 22:03:04.846366 2106 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 22:03:04.846530 kubelet[2106]: I1002 22:03:04.846520 2106 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 22:03:04.846585 kubelet[2106]: I1002 22:03:04.846578 2106 state_mem.go:36] "Initialized new in-memory state store" Oct 2 22:03:04.851677 kubelet[2106]: I1002 22:03:04.851654 2106 policy_none.go:49] "None policy: Start" Oct 2 22:03:04.852468 kubelet[2106]: I1002 22:03:04.852452 2106 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 22:03:04.852565 kubelet[2106]: I1002 22:03:04.852555 2106 state_mem.go:35] "Initializing new in-memory state store" Oct 2 22:03:04.860168 systemd[1]: Created slice kubepods.slice. Oct 2 22:03:04.861000 audit[2128]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2128 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:04.861000 audit[2128]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffd06235c0 a2=0 a3=1 items=0 ppid=2106 pid=2128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:04.861000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 22:03:04.862993 kubelet[2106]: I1002 22:03:04.862977 2106 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 22:03:04.863000 audit[2129]: NETFILTER_CFG table=mangle:34 family=10 entries=2 op=nft_register_chain pid=2129 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:04.863000 audit[2129]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff3396c20 a2=0 a3=1 items=0 ppid=2106 pid=2129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:04.863000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 22:03:04.864486 kubelet[2106]: I1002 22:03:04.864475 2106 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 22:03:04.864581 kubelet[2106]: I1002 22:03:04.864572 2106 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 22:03:04.864648 kubelet[2106]: I1002 22:03:04.864639 2106 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 22:03:04.864735 kubelet[2106]: E1002 22:03:04.864727 2106 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 22:03:04.865000 audit[2130]: NETFILTER_CFG table=mangle:35 family=2 entries=1 op=nft_register_chain pid=2130 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:04.865000 audit[2130]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc09cd3f0 a2=0 a3=1 items=0 ppid=2106 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:04.865000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 22:03:04.866000 audit[2131]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_chain pid=2131 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:04.866000 audit[2131]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe42c2d60 a2=0 a3=1 items=0 ppid=2106 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:04.866000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 22:03:04.867000 audit[2132]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=2132 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:04.867000 audit[2132]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff73dbbb0 a2=0 a3=1 items=0 ppid=2106 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:04.867000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 22:03:04.869000 audit[2133]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2133 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:04.869000 audit[2133]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe0744130 a2=0 a3=1 items=0 ppid=2106 pid=2133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:04.869000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 22:03:04.870000 audit[2134]: NETFILTER_CFG table=nat:39 family=10 entries=2 op=nft_register_chain pid=2134 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:04.870000 audit[2134]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffd3e1c530 a2=0 a3=1 items=0 ppid=2106 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:04.870000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 22:03:04.872000 audit[2135]: NETFILTER_CFG table=filter:40 family=10 entries=2 op=nft_register_chain pid=2135 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:04.872000 audit[2135]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdc99d7e0 a2=0 a3=1 items=0 ppid=2106 pid=2135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:04.872000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 22:03:04.876005 kubelet[2106]: W1002 22:03:04.875403 2106 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:04.876005 kubelet[2106]: E1002 22:03:04.875444 2106 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:04.878375 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 22:03:04.881492 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 22:03:04.888633 kubelet[2106]: I1002 22:03:04.888598 2106 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 22:03:04.887000 audit[2106]: AVC avc: denied { mac_admin } for pid=2106 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:04.887000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 22:03:04.887000 audit[2106]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e78300 a1=4000c3d020 a2=4000e782d0 a3=25 items=0 ppid=1 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:04.887000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 22:03:04.888873 kubelet[2106]: I1002 22:03:04.888698 2106 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 22:03:04.888904 kubelet[2106]: I1002 22:03:04.888895 2106 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 22:03:04.890925 kubelet[2106]: E1002 22:03:04.890906 2106 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-176754823f\" not found" Oct 2 22:03:04.891539 kubelet[2106]: I1002 22:03:04.891359 2106 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-176754823f" Oct 2 22:03:04.892174 kubelet[2106]: E1002 22:03:04.892082 2106 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.17:6443/api/v1/nodes\": dial tcp 10.200.20.17:6443: connect: connection refused" node="ci-3510.3.0-a-176754823f" Oct 2 22:03:04.965612 kubelet[2106]: I1002 22:03:04.965576 2106 topology_manager.go:212] "Topology Admit Handler" Oct 2 22:03:04.967042 kubelet[2106]: I1002 22:03:04.967018 2106 topology_manager.go:212] "Topology Admit Handler" Oct 2 22:03:04.968146 kubelet[2106]: I1002 22:03:04.968122 2106 topology_manager.go:212] "Topology Admit Handler" Oct 2 22:03:04.973106 systemd[1]: Created slice kubepods-burstable-pod6031d0146a1b80f8ad4b14ba614cc57c.slice. Oct 2 22:03:04.985133 systemd[1]: Created slice kubepods-burstable-podbdbc1116729badb2578fec489db6d064.slice. Oct 2 22:03:04.988562 systemd[1]: Created slice kubepods-burstable-pod22b0524d5531b74f7af3bbb7d2d62be1.slice. Oct 2 22:03:04.990034 kubelet[2106]: E1002 22:03:04.990000 2106 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-176754823f?timeout=10s\": dial tcp 10.200.20.17:6443: connect: connection refused" interval="400ms" Oct 2 22:03:04.990604 kubelet[2106]: I1002 22:03:04.990579 2106 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/22b0524d5531b74f7af3bbb7d2d62be1-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-176754823f\" (UID: \"22b0524d5531b74f7af3bbb7d2d62be1\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-176754823f" Oct 2 22:03:04.990665 kubelet[2106]: I1002 22:03:04.990611 2106 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/bdbc1116729badb2578fec489db6d064-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-176754823f\" (UID: \"bdbc1116729badb2578fec489db6d064\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-176754823f" Oct 2 22:03:04.990665 kubelet[2106]: I1002 22:03:04.990631 2106 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6031d0146a1b80f8ad4b14ba614cc57c-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-176754823f\" (UID: \"6031d0146a1b80f8ad4b14ba614cc57c\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-176754823f" Oct 2 22:03:04.990665 kubelet[2106]: I1002 22:03:04.990656 2106 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6031d0146a1b80f8ad4b14ba614cc57c-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-176754823f\" (UID: \"6031d0146a1b80f8ad4b14ba614cc57c\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-176754823f" Oct 2 22:03:04.990740 kubelet[2106]: I1002 22:03:04.990676 2106 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/22b0524d5531b74f7af3bbb7d2d62be1-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-176754823f\" (UID: \"22b0524d5531b74f7af3bbb7d2d62be1\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-176754823f" Oct 2 22:03:04.990740 kubelet[2106]: I1002 22:03:04.990695 2106 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/22b0524d5531b74f7af3bbb7d2d62be1-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-176754823f\" (UID: \"22b0524d5531b74f7af3bbb7d2d62be1\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-176754823f" Oct 2 22:03:04.990740 kubelet[2106]: I1002 22:03:04.990712 2106 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6031d0146a1b80f8ad4b14ba614cc57c-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-176754823f\" (UID: \"6031d0146a1b80f8ad4b14ba614cc57c\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-176754823f" Oct 2 22:03:04.990740 kubelet[2106]: I1002 22:03:04.990730 2106 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/22b0524d5531b74f7af3bbb7d2d62be1-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-176754823f\" (UID: \"22b0524d5531b74f7af3bbb7d2d62be1\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-176754823f" Oct 2 22:03:04.990827 kubelet[2106]: I1002 22:03:04.990749 2106 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/22b0524d5531b74f7af3bbb7d2d62be1-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-176754823f\" (UID: \"22b0524d5531b74f7af3bbb7d2d62be1\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-176754823f" Oct 2 22:03:05.093579 kubelet[2106]: I1002 22:03:05.093557 2106 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-176754823f" Oct 2 22:03:05.094179 kubelet[2106]: E1002 22:03:05.094165 2106 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.17:6443/api/v1/nodes\": dial tcp 10.200.20.17:6443: connect: connection refused" node="ci-3510.3.0-a-176754823f" Oct 2 22:03:05.285706 env[1354]: time="2023-10-02T22:03:05.285461043Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-176754823f,Uid:6031d0146a1b80f8ad4b14ba614cc57c,Namespace:kube-system,Attempt:0,}" Oct 2 22:03:05.290014 env[1354]: time="2023-10-02T22:03:05.289972900Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-176754823f,Uid:bdbc1116729badb2578fec489db6d064,Namespace:kube-system,Attempt:0,}" Oct 2 22:03:05.291829 env[1354]: time="2023-10-02T22:03:05.291711147Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-176754823f,Uid:22b0524d5531b74f7af3bbb7d2d62be1,Namespace:kube-system,Attempt:0,}" Oct 2 22:03:05.390833 kubelet[2106]: E1002 22:03:05.390717 2106 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-176754823f?timeout=10s\": dial tcp 10.200.20.17:6443: connect: connection refused" interval="800ms" Oct 2 22:03:05.497009 kubelet[2106]: I1002 22:03:05.496672 2106 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-176754823f" Oct 2 22:03:05.497009 kubelet[2106]: E1002 22:03:05.496982 2106 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.17:6443/api/v1/nodes\": dial tcp 10.200.20.17:6443: connect: connection refused" node="ci-3510.3.0-a-176754823f" Oct 2 22:03:05.953086 kubelet[2106]: W1002 22:03:05.953028 2106 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.20.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-176754823f&limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:05.953086 kubelet[2106]: E1002 22:03:05.953092 2106 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.20.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-176754823f&limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:06.016933 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3672076044.mount: Deactivated successfully. Oct 2 22:03:06.033157 env[1354]: time="2023-10-02T22:03:06.033107554Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:06.047945 env[1354]: time="2023-10-02T22:03:06.047899370Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:06.059149 env[1354]: time="2023-10-02T22:03:06.059100292Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:06.063319 env[1354]: time="2023-10-02T22:03:06.063286548Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:06.070008 env[1354]: time="2023-10-02T22:03:06.069968533Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:06.074352 env[1354]: time="2023-10-02T22:03:06.074325149Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:06.077002 env[1354]: time="2023-10-02T22:03:06.076970599Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:06.080276 env[1354]: time="2023-10-02T22:03:06.080251652Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:06.082163 env[1354]: time="2023-10-02T22:03:06.082133419Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:06.089027 env[1354]: time="2023-10-02T22:03:06.088994605Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:06.095823 env[1354]: time="2023-10-02T22:03:06.095785990Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:06.101436 env[1354]: time="2023-10-02T22:03:06.101396771Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:06.130277 kubelet[2106]: W1002 22:03:06.130212 2106 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.20.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:06.130277 kubelet[2106]: E1002 22:03:06.130279 2106 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.20.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:06.139857 env[1354]: time="2023-10-02T22:03:06.139761916Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 22:03:06.139857 env[1354]: time="2023-10-02T22:03:06.139806036Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 22:03:06.140046 env[1354]: time="2023-10-02T22:03:06.139822756Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 22:03:06.140272 env[1354]: time="2023-10-02T22:03:06.140148437Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fe16e6ca08bbc426c7538461ce3df8fcea4b25746c6a7be3fe3c8d9fc54f1e6c pid=2144 runtime=io.containerd.runc.v2 Oct 2 22:03:06.145703 kubelet[2106]: W1002 22:03:06.145652 2106 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.20.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:06.145703 kubelet[2106]: E1002 22:03:06.145687 2106 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.20.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:06.157687 systemd[1]: Started cri-containerd-fe16e6ca08bbc426c7538461ce3df8fcea4b25746c6a7be3fe3c8d9fc54f1e6c.scope. Oct 2 22:03:06.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.178000 audit: BPF prog-id=68 op=LOAD Oct 2 22:03:06.179000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.179000 audit[2153]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2144 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665313665366361303862626334323663373533383436316365336466 Oct 2 22:03:06.179000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.179000 audit[2153]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2144 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665313665366361303862626334323663373533383436316365336466 Oct 2 22:03:06.179000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.179000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.179000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.179000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.179000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.179000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.179000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.179000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.179000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.179000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.179000 audit: BPF prog-id=69 op=LOAD Oct 2 22:03:06.179000 audit[2153]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2144 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665313665366361303862626334323663373533383436316365336466 Oct 2 22:03:06.180000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.180000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.180000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.180000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.180000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.180000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.180000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.180000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.180000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.180000 audit: BPF prog-id=70 op=LOAD Oct 2 22:03:06.180000 audit[2153]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2144 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665313665366361303862626334323663373533383436316365336466 Oct 2 22:03:06.180000 audit: BPF prog-id=70 op=UNLOAD Oct 2 22:03:06.181000 audit: BPF prog-id=69 op=UNLOAD Oct 2 22:03:06.181000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.181000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.181000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.181000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.181000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.181000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.181000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.181000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.181000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.181000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.181000 audit: BPF prog-id=71 op=LOAD Oct 2 22:03:06.181000 audit[2153]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2144 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.181000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665313665366361303862626334323663373533383436316365336466 Oct 2 22:03:06.186233 env[1354]: time="2023-10-02T22:03:06.186159730Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 22:03:06.186233 env[1354]: time="2023-10-02T22:03:06.186199650Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 22:03:06.186338 env[1354]: time="2023-10-02T22:03:06.186210891Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 22:03:06.186421 env[1354]: time="2023-10-02T22:03:06.186383571Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8acf152fdf23a2092c9990f2c75dc4becb08188af88c08e7f33e0533c4e1fc17 pid=2179 runtime=io.containerd.runc.v2 Oct 2 22:03:06.191646 kubelet[2106]: E1002 22:03:06.191589 2106 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.20.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-176754823f?timeout=10s\": dial tcp 10.200.20.17:6443: connect: connection refused" interval="1.6s" Oct 2 22:03:06.192215 env[1354]: time="2023-10-02T22:03:06.192140353Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 22:03:06.192215 env[1354]: time="2023-10-02T22:03:06.192178153Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 22:03:06.192215 env[1354]: time="2023-10-02T22:03:06.192189193Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 22:03:06.192560 env[1354]: time="2023-10-02T22:03:06.192500834Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/08ed482ef694e68bf1a0d38b721f060d35d594fdc9921a5a59d9b677e2bf142c pid=2191 runtime=io.containerd.runc.v2 Oct 2 22:03:06.217875 systemd[1]: Started cri-containerd-08ed482ef694e68bf1a0d38b721f060d35d594fdc9921a5a59d9b677e2bf142c.scope. Oct 2 22:03:06.224192 systemd[1]: Started cri-containerd-8acf152fdf23a2092c9990f2c75dc4becb08188af88c08e7f33e0533c4e1fc17.scope. Oct 2 22:03:06.229520 env[1354]: time="2023-10-02T22:03:06.229479493Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-176754823f,Uid:6031d0146a1b80f8ad4b14ba614cc57c,Namespace:kube-system,Attempt:0,} returns sandbox id \"fe16e6ca08bbc426c7538461ce3df8fcea4b25746c6a7be3fe3c8d9fc54f1e6c\"" Oct 2 22:03:06.233162 env[1354]: time="2023-10-02T22:03:06.233115107Z" level=info msg="CreateContainer within sandbox \"fe16e6ca08bbc426c7538461ce3df8fcea4b25746c6a7be3fe3c8d9fc54f1e6c\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 22:03:06.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.247000 audit: BPF prog-id=72 op=LOAD Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2191 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038656434383265663639346536386266316130643338623732316630 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2191 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038656434383265663639346536386266316130643338623732316630 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit: BPF prog-id=73 op=LOAD Oct 2 22:03:06.248000 audit[2204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2191 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038656434383265663639346536386266316130643338623732316630 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit: BPF prog-id=74 op=LOAD Oct 2 22:03:06.248000 audit[2204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2191 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038656434383265663639346536386266316130643338623732316630 Oct 2 22:03:06.248000 audit: BPF prog-id=74 op=UNLOAD Oct 2 22:03:06.248000 audit: BPF prog-id=73 op=UNLOAD Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.248000 audit: BPF prog-id=75 op=LOAD Oct 2 22:03:06.248000 audit[2204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2191 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038656434383265663639346536386266316130643338623732316630 Oct 2 22:03:06.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.254000 audit: BPF prog-id=76 op=LOAD Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2179 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.255000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861636631353266646632336132303932633939393066326337356463 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2179 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.255000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861636631353266646632336132303932633939393066326337356463 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit: BPF prog-id=77 op=LOAD Oct 2 22:03:06.255000 audit[2200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2179 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.255000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861636631353266646632336132303932633939393066326337356463 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit: BPF prog-id=78 op=LOAD Oct 2 22:03:06.255000 audit[2200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2179 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.255000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861636631353266646632336132303932633939393066326337356463 Oct 2 22:03:06.255000 audit: BPF prog-id=78 op=UNLOAD Oct 2 22:03:06.255000 audit: BPF prog-id=77 op=UNLOAD Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.255000 audit: BPF prog-id=79 op=LOAD Oct 2 22:03:06.255000 audit[2200]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2179 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.255000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861636631353266646632336132303932633939393066326337356463 Oct 2 22:03:06.281086 env[1354]: time="2023-10-02T22:03:06.281042607Z" level=info msg="CreateContainer within sandbox \"fe16e6ca08bbc426c7538461ce3df8fcea4b25746c6a7be3fe3c8d9fc54f1e6c\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"17bdf8d736c4b240605c31ce72932bc117284a70c8b5e3632ad5cf658d605eb8\"" Oct 2 22:03:06.281854 env[1354]: time="2023-10-02T22:03:06.281812810Z" level=info msg="StartContainer for \"17bdf8d736c4b240605c31ce72932bc117284a70c8b5e3632ad5cf658d605eb8\"" Oct 2 22:03:06.287671 env[1354]: time="2023-10-02T22:03:06.287635072Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-176754823f,Uid:bdbc1116729badb2578fec489db6d064,Namespace:kube-system,Attempt:0,} returns sandbox id \"08ed482ef694e68bf1a0d38b721f060d35d594fdc9921a5a59d9b677e2bf142c\"" Oct 2 22:03:06.290101 env[1354]: time="2023-10-02T22:03:06.290074041Z" level=info msg="CreateContainer within sandbox \"08ed482ef694e68bf1a0d38b721f060d35d594fdc9921a5a59d9b677e2bf142c\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 22:03:06.290509 env[1354]: time="2023-10-02T22:03:06.290485883Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-176754823f,Uid:22b0524d5531b74f7af3bbb7d2d62be1,Namespace:kube-system,Attempt:0,} returns sandbox id \"8acf152fdf23a2092c9990f2c75dc4becb08188af88c08e7f33e0533c4e1fc17\"" Oct 2 22:03:06.297028 env[1354]: time="2023-10-02T22:03:06.296970907Z" level=info msg="CreateContainer within sandbox \"8acf152fdf23a2092c9990f2c75dc4becb08188af88c08e7f33e0533c4e1fc17\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 22:03:06.309327 systemd[1]: Started cri-containerd-17bdf8d736c4b240605c31ce72932bc117284a70c8b5e3632ad5cf658d605eb8.scope. Oct 2 22:03:06.314592 kubelet[2106]: I1002 22:03:06.313652 2106 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-176754823f" Oct 2 22:03:06.314592 kubelet[2106]: E1002 22:03:06.313986 2106 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.20.17:6443/api/v1/nodes\": dial tcp 10.200.20.17:6443: connect: connection refused" node="ci-3510.3.0-a-176754823f" Oct 2 22:03:06.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.328000 audit: BPF prog-id=80 op=LOAD Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2144 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137626466386437333663346232343036303563333163653732393332 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2144 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137626466386437333663346232343036303563333163653732393332 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit: BPF prog-id=81 op=LOAD Oct 2 22:03:06.329000 audit[2266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2144 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137626466386437333663346232343036303563333163653732393332 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit: BPF prog-id=82 op=LOAD Oct 2 22:03:06.329000 audit[2266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2144 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137626466386437333663346232343036303563333163653732393332 Oct 2 22:03:06.329000 audit: BPF prog-id=82 op=UNLOAD Oct 2 22:03:06.329000 audit: BPF prog-id=81 op=UNLOAD Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { perfmon } for pid=2266 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit[2266]: AVC avc: denied { bpf } for pid=2266 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.329000 audit: BPF prog-id=83 op=LOAD Oct 2 22:03:06.329000 audit[2266]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2144 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137626466386437333663346232343036303563333163653732393332 Oct 2 22:03:06.337281 env[1354]: time="2023-10-02T22:03:06.337234539Z" level=info msg="CreateContainer within sandbox \"08ed482ef694e68bf1a0d38b721f060d35d594fdc9921a5a59d9b677e2bf142c\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"c14643aaf73d0487cc523055d0965de3171fcd541a443d036a27c2f3a056a513\"" Oct 2 22:03:06.337974 env[1354]: time="2023-10-02T22:03:06.337915981Z" level=info msg="StartContainer for \"c14643aaf73d0487cc523055d0965de3171fcd541a443d036a27c2f3a056a513\"" Oct 2 22:03:06.340553 env[1354]: time="2023-10-02T22:03:06.340524951Z" level=info msg="CreateContainer within sandbox \"8acf152fdf23a2092c9990f2c75dc4becb08188af88c08e7f33e0533c4e1fc17\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"b4a068396ea29103343f74ed46cf8760800f8d671afc55486e440450ebb064ec\"" Oct 2 22:03:06.342700 env[1354]: time="2023-10-02T22:03:06.342667959Z" level=info msg="StartContainer for \"b4a068396ea29103343f74ed46cf8760800f8d671afc55486e440450ebb064ec\"" Oct 2 22:03:06.363437 kubelet[2106]: W1002 22:03:06.363358 2106 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.20.17:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:06.363437 kubelet[2106]: E1002 22:03:06.363414 2106 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.20.17:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.20.17:6443: connect: connection refused Oct 2 22:03:06.366508 env[1354]: time="2023-10-02T22:03:06.366461569Z" level=info msg="StartContainer for \"17bdf8d736c4b240605c31ce72932bc117284a70c8b5e3632ad5cf658d605eb8\" returns successfully" Oct 2 22:03:06.374364 systemd[1]: Started cri-containerd-c14643aaf73d0487cc523055d0965de3171fcd541a443d036a27c2f3a056a513.scope. Oct 2 22:03:06.390755 systemd[1]: Started cri-containerd-b4a068396ea29103343f74ed46cf8760800f8d671afc55486e440450ebb064ec.scope. Oct 2 22:03:06.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.396000 audit: BPF prog-id=84 op=LOAD Oct 2 22:03:06.397000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.397000 audit[2305]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2191 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.397000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331343634336161663733643034383763633532333035356430393635 Oct 2 22:03:06.397000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.397000 audit[2305]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2191 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.397000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331343634336161663733643034383763633532333035356430393635 Oct 2 22:03:06.397000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.397000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.397000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.397000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.397000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.397000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.397000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.397000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.397000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.397000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.397000 audit: BPF prog-id=85 op=LOAD Oct 2 22:03:06.397000 audit[2305]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2191 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.397000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331343634336161663733643034383763633532333035356430393635 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit: BPF prog-id=86 op=LOAD Oct 2 22:03:06.398000 audit[2305]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2191 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331343634336161663733643034383763633532333035356430393635 Oct 2 22:03:06.398000 audit: BPF prog-id=86 op=UNLOAD Oct 2 22:03:06.398000 audit: BPF prog-id=85 op=UNLOAD Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { perfmon } for pid=2305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit[2305]: AVC avc: denied { bpf } for pid=2305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.398000 audit: BPF prog-id=87 op=LOAD Oct 2 22:03:06.398000 audit[2305]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2191 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331343634336161663733643034383763633532333035356430393635 Oct 2 22:03:06.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.418000 audit: BPF prog-id=88 op=LOAD Oct 2 22:03:06.419000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.419000 audit[2320]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2179 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234613036383339366561323931303333343366373465643436636638 Oct 2 22:03:06.419000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.419000 audit[2320]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2179 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234613036383339366561323931303333343366373465643436636638 Oct 2 22:03:06.419000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.419000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.419000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.419000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.419000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.419000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.419000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.419000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.419000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.419000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.419000 audit: BPF prog-id=89 op=LOAD Oct 2 22:03:06.419000 audit[2320]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2179 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234613036383339366561323931303333343366373465643436636638 Oct 2 22:03:06.420000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.420000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.420000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.420000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.420000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.420000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.420000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.420000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.420000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.420000 audit: BPF prog-id=90 op=LOAD Oct 2 22:03:06.420000 audit[2320]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2179 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.420000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234613036383339366561323931303333343366373465643436636638 Oct 2 22:03:06.420000 audit: BPF prog-id=90 op=UNLOAD Oct 2 22:03:06.420000 audit: BPF prog-id=89 op=UNLOAD Oct 2 22:03:06.421000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.421000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.421000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.421000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.421000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.421000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.421000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.421000 audit[2320]: AVC avc: denied { perfmon } for pid=2320 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.421000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.421000 audit[2320]: AVC avc: denied { bpf } for pid=2320 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:06.421000 audit: BPF prog-id=91 op=LOAD Oct 2 22:03:06.421000 audit[2320]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2179 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:06.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234613036383339366561323931303333343366373465643436636638 Oct 2 22:03:06.442099 env[1354]: time="2023-10-02T22:03:06.442056453Z" level=info msg="StartContainer for \"c14643aaf73d0487cc523055d0965de3171fcd541a443d036a27c2f3a056a513\" returns successfully" Oct 2 22:03:06.462157 env[1354]: time="2023-10-02T22:03:06.462101529Z" level=info msg="StartContainer for \"b4a068396ea29103343f74ed46cf8760800f8d671afc55486e440450ebb064ec\" returns successfully" Oct 2 22:03:07.916162 kubelet[2106]: I1002 22:03:07.916133 2106 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-176754823f" Oct 2 22:03:08.744000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:08.750062 kernel: kauditd_printk_skb: 561 callbacks suppressed Oct 2 22:03:08.750144 kernel: audit: type=1400 audit(1696284188.744:700): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:08.744000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003e3d350 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:03:08.812961 kernel: audit: type=1300 audit(1696284188.744:700): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003e3d350 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:03:08.744000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:08.842505 kernel: audit: type=1327 audit(1696284188.744:700): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:08.795000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:08.872574 kernel: audit: type=1400 audit(1696284188.795:701): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:08.795000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003cb6ae0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:03:08.906913 kernel: audit: type=1300 audit(1696284188.795:701): arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4003cb6ae0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:03:08.795000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:08.939016 kernel: audit: type=1327 audit(1696284188.795:701): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:08.812000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:08.961154 kernel: audit: type=1400 audit(1696284188.812:702): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:08.961275 kernel: audit: type=1300 audit(1696284188.812:702): arch=c00000b7 syscall=27 success=no exit=-13 a0=49 a1=4006931100 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:03:08.812000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=49 a1=4006931100 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:03:08.812000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:09.018075 kernel: audit: type=1327 audit(1696284188.812:702): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:08.833000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:09.047776 kernel: audit: type=1400 audit(1696284188.833:703): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:08.833000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=60 a1=4003cb79b0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:03:08.833000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:09.065000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:09.065000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4003d5af40 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:03:09.065000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:09.066000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:09.066000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4003ee4300 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:03:09.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:03:09.116000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:09.116000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400115e900 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:03:09.116000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:09.117000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:09.117000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400117e4e0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:03:09.117000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:09.224700 kubelet[2106]: E1002 22:03:09.224673 2106 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-176754823f\" not found" node="ci-3510.3.0-a-176754823f" Oct 2 22:03:09.277726 kubelet[2106]: I1002 22:03:09.277619 2106 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-176754823f" Oct 2 22:03:09.783487 kubelet[2106]: I1002 22:03:09.783431 2106 apiserver.go:52] "Watching apiserver" Oct 2 22:03:09.788853 kubelet[2106]: I1002 22:03:09.788836 2106 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 22:03:09.814021 kubelet[2106]: I1002 22:03:09.814002 2106 reconciler.go:41] "Reconciler: start to sync state" Oct 2 22:03:09.972138 kubelet[2106]: W1002 22:03:09.972113 2106 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 22:03:11.402413 kubelet[2106]: W1002 22:03:11.402378 2106 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 22:03:11.578980 systemd[1]: Reloading. Oct 2 22:03:11.652940 /usr/lib/systemd/system-generators/torcx-generator[2392]: time="2023-10-02T22:03:11Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 22:03:11.652977 /usr/lib/systemd/system-generators/torcx-generator[2392]: time="2023-10-02T22:03:11Z" level=info msg="torcx already run" Oct 2 22:03:11.769708 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 22:03:11.769871 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 22:03:11.785128 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 22:03:11.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.861000 audit: BPF prog-id=92 op=LOAD Oct 2 22:03:11.862000 audit: BPF prog-id=84 op=UNLOAD Oct 2 22:03:11.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit: BPF prog-id=93 op=LOAD Oct 2 22:03:11.863000 audit: BPF prog-id=53 op=UNLOAD Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit: BPF prog-id=94 op=LOAD Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.864000 audit: BPF prog-id=95 op=LOAD Oct 2 22:03:11.864000 audit: BPF prog-id=54 op=UNLOAD Oct 2 22:03:11.864000 audit: BPF prog-id=55 op=UNLOAD Oct 2 22:03:11.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.865000 audit: BPF prog-id=96 op=LOAD Oct 2 22:03:11.865000 audit: BPF prog-id=88 op=UNLOAD Oct 2 22:03:11.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.866000 audit: BPF prog-id=97 op=LOAD Oct 2 22:03:11.866000 audit: BPF prog-id=56 op=UNLOAD Oct 2 22:03:11.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit: BPF prog-id=98 op=LOAD Oct 2 22:03:11.868000 audit: BPF prog-id=57 op=UNLOAD Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit: BPF prog-id=99 op=LOAD Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.869000 audit: BPF prog-id=100 op=LOAD Oct 2 22:03:11.869000 audit: BPF prog-id=58 op=UNLOAD Oct 2 22:03:11.869000 audit: BPF prog-id=59 op=UNLOAD Oct 2 22:03:11.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.869000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.869000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.870000 audit: BPF prog-id=101 op=LOAD Oct 2 22:03:11.870000 audit: BPF prog-id=80 op=UNLOAD Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.871000 audit: BPF prog-id=102 op=LOAD Oct 2 22:03:11.871000 audit: BPF prog-id=60 op=UNLOAD Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.872000 audit: BPF prog-id=103 op=LOAD Oct 2 22:03:11.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.872000 audit: BPF prog-id=104 op=LOAD Oct 2 22:03:11.872000 audit: BPF prog-id=61 op=UNLOAD Oct 2 22:03:11.872000 audit: BPF prog-id=62 op=UNLOAD Oct 2 22:03:11.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.874000 audit: BPF prog-id=105 op=LOAD Oct 2 22:03:11.874000 audit: BPF prog-id=63 op=UNLOAD Oct 2 22:03:11.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.875000 audit: BPF prog-id=106 op=LOAD Oct 2 22:03:11.875000 audit: BPF prog-id=64 op=UNLOAD Oct 2 22:03:11.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.878000 audit: BPF prog-id=107 op=LOAD Oct 2 22:03:11.878000 audit: BPF prog-id=72 op=UNLOAD Oct 2 22:03:11.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.880000 audit: BPF prog-id=108 op=LOAD Oct 2 22:03:11.880000 audit: BPF prog-id=68 op=UNLOAD Oct 2 22:03:11.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.881000 audit: BPF prog-id=109 op=LOAD Oct 2 22:03:11.881000 audit: BPF prog-id=65 op=UNLOAD Oct 2 22:03:11.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.882000 audit: BPF prog-id=110 op=LOAD Oct 2 22:03:11.882000 audit: BPF prog-id=76 op=UNLOAD Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit: BPF prog-id=111 op=LOAD Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:11.883000 audit: BPF prog-id=112 op=LOAD Oct 2 22:03:11.883000 audit: BPF prog-id=66 op=UNLOAD Oct 2 22:03:11.884000 audit: BPF prog-id=67 op=UNLOAD Oct 2 22:03:11.900987 systemd[1]: Stopping kubelet.service... Oct 2 22:03:11.925713 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 22:03:11.926078 systemd[1]: Stopped kubelet.service. Oct 2 22:03:11.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:03:11.926137 systemd[1]: kubelet.service: Consumed 1.047s CPU time. Oct 2 22:03:11.929872 systemd[1]: Started kubelet.service. Oct 2 22:03:11.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:03:12.024955 kubelet[2452]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 22:03:12.024955 kubelet[2452]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 22:03:12.024955 kubelet[2452]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 22:03:12.025335 kubelet[2452]: I1002 22:03:12.025066 2452 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 22:03:12.031219 kubelet[2452]: I1002 22:03:12.031193 2452 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 22:03:12.031335 kubelet[2452]: I1002 22:03:12.031326 2452 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 22:03:12.031593 kubelet[2452]: I1002 22:03:12.031578 2452 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 22:03:12.033170 kubelet[2452]: I1002 22:03:12.033148 2452 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 22:03:12.036161 kubelet[2452]: I1002 22:03:12.036142 2452 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 22:03:12.037101 kubelet[2452]: W1002 22:03:12.037087 2452 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 22:03:12.037696 kubelet[2452]: I1002 22:03:12.037680 2452 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 22:03:12.038046 kubelet[2452]: I1002 22:03:12.038033 2452 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 22:03:12.038183 kubelet[2452]: I1002 22:03:12.038172 2452 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 22:03:12.038330 kubelet[2452]: I1002 22:03:12.038319 2452 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 22:03:12.038396 kubelet[2452]: I1002 22:03:12.038387 2452 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 22:03:12.038515 kubelet[2452]: I1002 22:03:12.038506 2452 state_mem.go:36] "Initialized new in-memory state store" Oct 2 22:03:12.042191 kubelet[2452]: I1002 22:03:12.042172 2452 kubelet.go:405] "Attempting to sync node with API server" Oct 2 22:03:12.042293 kubelet[2452]: I1002 22:03:12.042283 2452 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 22:03:12.042412 kubelet[2452]: I1002 22:03:12.042403 2452 kubelet.go:309] "Adding apiserver pod source" Oct 2 22:03:12.042722 kubelet[2452]: I1002 22:03:12.042707 2452 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 22:03:12.058000 audit[2465]: USER_ACCT pid=2465 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:03:12.059296 sudo[2465]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 22:03:12.058000 audit[2465]: CRED_REFR pid=2465 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:03:12.059518 sudo[2465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 22:03:12.060000 audit[2465]: USER_START pid=2465 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:03:12.067347 kubelet[2452]: I1002 22:03:12.066576 2452 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 22:03:12.067770 kubelet[2452]: I1002 22:03:12.067733 2452 server.go:1168] "Started kubelet" Oct 2 22:03:12.078215 kubelet[2452]: I1002 22:03:12.074998 2452 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 22:03:12.078215 kubelet[2452]: I1002 22:03:12.076211 2452 server.go:461] "Adding debug handlers to kubelet server" Oct 2 22:03:12.078215 kubelet[2452]: I1002 22:03:12.078042 2452 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 22:03:12.078000 audit[2452]: AVC avc: denied { mac_admin } for pid=2452 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:12.078000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 22:03:12.078000 audit[2452]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000db2450 a1=40008f4d20 a2=4000db2420 a3=25 items=0 ppid=1 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:12.078000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 22:03:12.080205 kubelet[2452]: I1002 22:03:12.080189 2452 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 22:03:12.079000 audit[2452]: AVC avc: denied { mac_admin } for pid=2452 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:12.079000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 22:03:12.079000 audit[2452]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400091b5a0 a1=40008f4d38 a2=4000db24e0 a3=25 items=0 ppid=1 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:12.079000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 22:03:12.080521 kubelet[2452]: I1002 22:03:12.080507 2452 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 22:03:12.080602 kubelet[2452]: I1002 22:03:12.080593 2452 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 22:03:12.092456 kubelet[2452]: E1002 22:03:12.092417 2452 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 22:03:12.092456 kubelet[2452]: E1002 22:03:12.092454 2452 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 22:03:12.092926 kubelet[2452]: I1002 22:03:12.092904 2452 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 22:03:12.093153 kubelet[2452]: I1002 22:03:12.093130 2452 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 22:03:12.151105 kubelet[2452]: I1002 22:03:12.151061 2452 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 22:03:12.159133 kubelet[2452]: I1002 22:03:12.159095 2452 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 22:03:12.159264 kubelet[2452]: I1002 22:03:12.159158 2452 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 22:03:12.159264 kubelet[2452]: I1002 22:03:12.159177 2452 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 22:03:12.159264 kubelet[2452]: E1002 22:03:12.159233 2452 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 22:03:12.177111 kubelet[2452]: I1002 22:03:12.177024 2452 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 22:03:12.177253 kubelet[2452]: I1002 22:03:12.177242 2452 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 22:03:12.177439 kubelet[2452]: I1002 22:03:12.177428 2452 state_mem.go:36] "Initialized new in-memory state store" Oct 2 22:03:12.177759 kubelet[2452]: I1002 22:03:12.177687 2452 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 22:03:12.177924 kubelet[2452]: I1002 22:03:12.177906 2452 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 22:03:12.178070 kubelet[2452]: I1002 22:03:12.178059 2452 policy_none.go:49] "None policy: Start" Oct 2 22:03:12.178968 kubelet[2452]: I1002 22:03:12.178941 2452 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 22:03:12.179083 kubelet[2452]: I1002 22:03:12.179073 2452 state_mem.go:35] "Initializing new in-memory state store" Oct 2 22:03:12.179263 kubelet[2452]: I1002 22:03:12.179252 2452 state_mem.go:75] "Updated machine memory state" Oct 2 22:03:12.182615 kubelet[2452]: I1002 22:03:12.182600 2452 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 22:03:12.181000 audit[2452]: AVC avc: denied { mac_admin } for pid=2452 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:12.181000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 22:03:12.181000 audit[2452]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400130d080 a1=400133f878 a2=400130d050 a3=25 items=0 ppid=1 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:12.181000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 22:03:12.183019 kubelet[2452]: I1002 22:03:12.183005 2452 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 22:03:12.183297 kubelet[2452]: I1002 22:03:12.183286 2452 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 22:03:12.203268 kubelet[2452]: I1002 22:03:12.203235 2452 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-176754823f" Oct 2 22:03:12.226454 kubelet[2452]: I1002 22:03:12.226425 2452 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-176754823f" Oct 2 22:03:12.226699 kubelet[2452]: I1002 22:03:12.226676 2452 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-176754823f" Oct 2 22:03:12.259396 kubelet[2452]: I1002 22:03:12.259363 2452 topology_manager.go:212] "Topology Admit Handler" Oct 2 22:03:12.259613 kubelet[2452]: I1002 22:03:12.259599 2452 topology_manager.go:212] "Topology Admit Handler" Oct 2 22:03:12.259718 kubelet[2452]: I1002 22:03:12.259706 2452 topology_manager.go:212] "Topology Admit Handler" Oct 2 22:03:12.268222 kubelet[2452]: W1002 22:03:12.268200 2452 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 22:03:12.268483 kubelet[2452]: E1002 22:03:12.268457 2452 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510.3.0-a-176754823f\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-176754823f" Oct 2 22:03:12.268617 kubelet[2452]: W1002 22:03:12.268394 2452 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 22:03:12.270833 kubelet[2452]: W1002 22:03:12.270803 2452 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 22:03:12.271020 kubelet[2452]: E1002 22:03:12.270996 2452 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510.3.0-a-176754823f\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.0-a-176754823f" Oct 2 22:03:12.394261 kubelet[2452]: I1002 22:03:12.394222 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/22b0524d5531b74f7af3bbb7d2d62be1-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-176754823f\" (UID: \"22b0524d5531b74f7af3bbb7d2d62be1\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-176754823f" Oct 2 22:03:12.394464 kubelet[2452]: I1002 22:03:12.394452 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/bdbc1116729badb2578fec489db6d064-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-176754823f\" (UID: \"bdbc1116729badb2578fec489db6d064\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-176754823f" Oct 2 22:03:12.394571 kubelet[2452]: I1002 22:03:12.394561 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6031d0146a1b80f8ad4b14ba614cc57c-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-176754823f\" (UID: \"6031d0146a1b80f8ad4b14ba614cc57c\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-176754823f" Oct 2 22:03:12.394684 kubelet[2452]: I1002 22:03:12.394674 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/22b0524d5531b74f7af3bbb7d2d62be1-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-176754823f\" (UID: \"22b0524d5531b74f7af3bbb7d2d62be1\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-176754823f" Oct 2 22:03:12.394785 kubelet[2452]: I1002 22:03:12.394775 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/22b0524d5531b74f7af3bbb7d2d62be1-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-176754823f\" (UID: \"22b0524d5531b74f7af3bbb7d2d62be1\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-176754823f" Oct 2 22:03:12.394882 kubelet[2452]: I1002 22:03:12.394872 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6031d0146a1b80f8ad4b14ba614cc57c-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-176754823f\" (UID: \"6031d0146a1b80f8ad4b14ba614cc57c\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-176754823f" Oct 2 22:03:12.395028 kubelet[2452]: I1002 22:03:12.394999 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6031d0146a1b80f8ad4b14ba614cc57c-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-176754823f\" (UID: \"6031d0146a1b80f8ad4b14ba614cc57c\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-176754823f" Oct 2 22:03:12.395134 kubelet[2452]: I1002 22:03:12.395124 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/22b0524d5531b74f7af3bbb7d2d62be1-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-176754823f\" (UID: \"22b0524d5531b74f7af3bbb7d2d62be1\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-176754823f" Oct 2 22:03:12.395234 kubelet[2452]: I1002 22:03:12.395224 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/22b0524d5531b74f7af3bbb7d2d62be1-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-176754823f\" (UID: \"22b0524d5531b74f7af3bbb7d2d62be1\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-176754823f" Oct 2 22:03:12.605094 sudo[2465]: pam_unix(sudo:session): session closed for user root Oct 2 22:03:12.604000 audit[2465]: USER_END pid=2465 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:03:12.604000 audit[2465]: CRED_DISP pid=2465 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:03:13.057485 kubelet[2452]: I1002 22:03:13.057460 2452 apiserver.go:52] "Watching apiserver" Oct 2 22:03:13.093614 kubelet[2452]: I1002 22:03:13.093588 2452 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 22:03:13.098938 kubelet[2452]: I1002 22:03:13.098921 2452 reconciler.go:41] "Reconciler: start to sync state" Oct 2 22:03:13.189709 kubelet[2452]: I1002 22:03:13.189680 2452 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-176754823f" podStartSLOduration=4.189641576 podCreationTimestamp="2023-10-02 22:03:09 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 22:03:13.189428495 +0000 UTC m=+1.246098015" watchObservedRunningTime="2023-10-02 22:03:13.189641576 +0000 UTC m=+1.246311096" Oct 2 22:03:13.204743 kubelet[2452]: I1002 22:03:13.204716 2452 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-176754823f" podStartSLOduration=1.2046819850000001 podCreationTimestamp="2023-10-02 22:03:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 22:03:13.204508904 +0000 UTC m=+1.261178424" watchObservedRunningTime="2023-10-02 22:03:13.204681985 +0000 UTC m=+1.261351505" Oct 2 22:03:13.205064 kubelet[2452]: I1002 22:03:13.205049 2452 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-176754823f" podStartSLOduration=2.205029386 podCreationTimestamp="2023-10-02 22:03:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 22:03:13.197882603 +0000 UTC m=+1.254552123" watchObservedRunningTime="2023-10-02 22:03:13.205029386 +0000 UTC m=+1.261698906" Oct 2 22:03:14.196484 sudo[1694]: pam_unix(sudo:session): session closed for user root Oct 2 22:03:14.195000 audit[1694]: USER_END pid=1694 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:03:14.201844 kernel: kauditd_printk_skb: 277 callbacks suppressed Oct 2 22:03:14.201960 kernel: audit: type=1106 audit(1696284194.195:962): pid=1694 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:03:14.195000 audit[1694]: CRED_DISP pid=1694 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:03:14.245372 kernel: audit: type=1104 audit(1696284194.195:963): pid=1694 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 22:03:14.276789 sshd[1691]: pam_unix(sshd:session): session closed for user core Oct 2 22:03:14.276000 audit[1691]: USER_END pid=1691 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:03:14.276000 audit[1691]: CRED_DISP pid=1691 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:03:14.307136 systemd[1]: sshd@6-10.200.20.17:22-10.200.12.6:52126.service: Deactivated successfully. Oct 2 22:03:14.307839 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 22:03:14.308011 systemd[1]: session-9.scope: Consumed 7.546s CPU time. Oct 2 22:03:14.329038 kernel: audit: type=1106 audit(1696284194.276:964): pid=1691 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:03:14.329119 kernel: audit: type=1104 audit(1696284194.276:965): pid=1691 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:03:14.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.17:22-10.200.12.6:52126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:03:14.329869 systemd-logind[1336]: Session 9 logged out. Waiting for processes to exit. Oct 2 22:03:14.331573 systemd-logind[1336]: Removed session 9. Oct 2 22:03:14.350970 kernel: audit: type=1131 audit(1696284194.306:966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.20.17:22-10.200.12.6:52126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:03:23.539000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521035 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 22:03:23.539000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000d74980 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:03:23.596620 kernel: audit: type=1400 audit(1696284203.539:967): avc: denied { watch } for pid=2338 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=521035 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 22:03:23.596752 kernel: audit: type=1300 audit(1696284203.539:967): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000d74980 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:03:23.539000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:23.625374 kernel: audit: type=1327 audit(1696284203.539:967): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:24.162000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:24.162000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011b95c0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:03:24.223834 kernel: audit: type=1400 audit(1696284204.162:968): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:24.224011 kernel: audit: type=1300 audit(1696284204.162:968): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011b95c0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:03:24.162000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:24.251988 kernel: audit: type=1327 audit(1696284204.162:968): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:24.172000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:24.172000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40007f8600 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:03:24.309036 kernel: audit: type=1400 audit(1696284204.172:969): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:24.309131 kernel: audit: type=1300 audit(1696284204.172:969): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40007f8600 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:03:24.172000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:24.335975 kernel: audit: type=1327 audit(1696284204.172:969): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:24.172000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:24.359023 kernel: audit: type=1400 audit(1696284204.172:970): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:24.172000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40007f8640 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:03:24.172000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:24.172000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:03:24.172000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40007f8680 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:03:24.172000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:03:26.626583 kubelet[2452]: I1002 22:03:26.626557 2452 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 22:03:26.627416 env[1354]: time="2023-10-02T22:03:26.627371942Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 22:03:26.627965 kubelet[2452]: I1002 22:03:26.627933 2452 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 22:03:26.741675 kubelet[2452]: I1002 22:03:26.741642 2452 topology_manager.go:212] "Topology Admit Handler" Oct 2 22:03:26.741983 kubelet[2452]: I1002 22:03:26.741967 2452 topology_manager.go:212] "Topology Admit Handler" Oct 2 22:03:26.747242 systemd[1]: Created slice kubepods-besteffort-podc90cbdba_a295_41b9_881d_3857e33c6b2f.slice. Oct 2 22:03:26.755382 systemd[1]: Created slice kubepods-burstable-pod0cf8447f_4fb8_4561_a50d_aa041f55e60d.slice. Oct 2 22:03:26.869242 kubelet[2452]: I1002 22:03:26.869211 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c90cbdba-a295-41b9-881d-3857e33c6b2f-xtables-lock\") pod \"kube-proxy-kpfr7\" (UID: \"c90cbdba-a295-41b9-881d-3857e33c6b2f\") " pod="kube-system/kube-proxy-kpfr7" Oct 2 22:03:26.869423 kubelet[2452]: I1002 22:03:26.869413 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cilium-run\") pod \"cilium-bh8vn\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " pod="kube-system/cilium-bh8vn" Oct 2 22:03:26.869499 kubelet[2452]: I1002 22:03:26.869490 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-bpf-maps\") pod \"cilium-bh8vn\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " pod="kube-system/cilium-bh8vn" Oct 2 22:03:26.869576 kubelet[2452]: I1002 22:03:26.869567 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-hostproc\") pod \"cilium-bh8vn\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " pod="kube-system/cilium-bh8vn" Oct 2 22:03:26.869652 kubelet[2452]: I1002 22:03:26.869643 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/0cf8447f-4fb8-4561-a50d-aa041f55e60d-hubble-tls\") pod \"cilium-bh8vn\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " pod="kube-system/cilium-bh8vn" Oct 2 22:03:26.869724 kubelet[2452]: I1002 22:03:26.869716 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/0cf8447f-4fb8-4561-a50d-aa041f55e60d-clustermesh-secrets\") pod \"cilium-bh8vn\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " pod="kube-system/cilium-bh8vn" Oct 2 22:03:26.869815 kubelet[2452]: I1002 22:03:26.869806 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cmlh8\" (UniqueName: \"kubernetes.io/projected/0cf8447f-4fb8-4561-a50d-aa041f55e60d-kube-api-access-cmlh8\") pod \"cilium-bh8vn\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " pod="kube-system/cilium-bh8vn" Oct 2 22:03:26.869887 kubelet[2452]: I1002 22:03:26.869879 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/c90cbdba-a295-41b9-881d-3857e33c6b2f-kube-proxy\") pod \"kube-proxy-kpfr7\" (UID: \"c90cbdba-a295-41b9-881d-3857e33c6b2f\") " pod="kube-system/kube-proxy-kpfr7" Oct 2 22:03:26.869998 kubelet[2452]: I1002 22:03:26.869988 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-lib-modules\") pod \"cilium-bh8vn\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " pod="kube-system/cilium-bh8vn" Oct 2 22:03:26.870090 kubelet[2452]: I1002 22:03:26.870080 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vxb98\" (UniqueName: \"kubernetes.io/projected/c90cbdba-a295-41b9-881d-3857e33c6b2f-kube-api-access-vxb98\") pod \"kube-proxy-kpfr7\" (UID: \"c90cbdba-a295-41b9-881d-3857e33c6b2f\") " pod="kube-system/kube-proxy-kpfr7" Oct 2 22:03:26.870203 kubelet[2452]: I1002 22:03:26.870173 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cilium-cgroup\") pod \"cilium-bh8vn\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " pod="kube-system/cilium-bh8vn" Oct 2 22:03:26.870246 kubelet[2452]: I1002 22:03:26.870214 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cilium-config-path\") pod \"cilium-bh8vn\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " pod="kube-system/cilium-bh8vn" Oct 2 22:03:26.870272 kubelet[2452]: I1002 22:03:26.870248 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-host-proc-sys-kernel\") pod \"cilium-bh8vn\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " pod="kube-system/cilium-bh8vn" Oct 2 22:03:26.870301 kubelet[2452]: I1002 22:03:26.870282 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-host-proc-sys-net\") pod \"cilium-bh8vn\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " pod="kube-system/cilium-bh8vn" Oct 2 22:03:26.870326 kubelet[2452]: I1002 22:03:26.870308 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c90cbdba-a295-41b9-881d-3857e33c6b2f-lib-modules\") pod \"kube-proxy-kpfr7\" (UID: \"c90cbdba-a295-41b9-881d-3857e33c6b2f\") " pod="kube-system/kube-proxy-kpfr7" Oct 2 22:03:26.870351 kubelet[2452]: I1002 22:03:26.870345 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cni-path\") pod \"cilium-bh8vn\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " pod="kube-system/cilium-bh8vn" Oct 2 22:03:26.870377 kubelet[2452]: I1002 22:03:26.870370 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-etc-cni-netd\") pod \"cilium-bh8vn\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " pod="kube-system/cilium-bh8vn" Oct 2 22:03:26.870422 kubelet[2452]: I1002 22:03:26.870387 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-xtables-lock\") pod \"cilium-bh8vn\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " pod="kube-system/cilium-bh8vn" Oct 2 22:03:26.993211 kubelet[2452]: E1002 22:03:26.993100 2452 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 22:03:26.993211 kubelet[2452]: E1002 22:03:26.993131 2452 projected.go:198] Error preparing data for projected volume kube-api-access-vxb98 for pod kube-system/kube-proxy-kpfr7: configmap "kube-root-ca.crt" not found Oct 2 22:03:26.993211 kubelet[2452]: E1002 22:03:26.993195 2452 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/c90cbdba-a295-41b9-881d-3857e33c6b2f-kube-api-access-vxb98 podName:c90cbdba-a295-41b9-881d-3857e33c6b2f nodeName:}" failed. No retries permitted until 2023-10-02 22:03:27.493174125 +0000 UTC m=+15.549843645 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-vxb98" (UniqueName: "kubernetes.io/projected/c90cbdba-a295-41b9-881d-3857e33c6b2f-kube-api-access-vxb98") pod "kube-proxy-kpfr7" (UID: "c90cbdba-a295-41b9-881d-3857e33c6b2f") : configmap "kube-root-ca.crt" not found Oct 2 22:03:26.995106 kubelet[2452]: E1002 22:03:26.995075 2452 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 22:03:26.995106 kubelet[2452]: E1002 22:03:26.995101 2452 projected.go:198] Error preparing data for projected volume kube-api-access-cmlh8 for pod kube-system/cilium-bh8vn: configmap "kube-root-ca.crt" not found Oct 2 22:03:26.995257 kubelet[2452]: E1002 22:03:26.995143 2452 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/0cf8447f-4fb8-4561-a50d-aa041f55e60d-kube-api-access-cmlh8 podName:0cf8447f-4fb8-4561-a50d-aa041f55e60d nodeName:}" failed. No retries permitted until 2023-10-02 22:03:27.49513065 +0000 UTC m=+15.551800170 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-cmlh8" (UniqueName: "kubernetes.io/projected/0cf8447f-4fb8-4561-a50d-aa041f55e60d-kube-api-access-cmlh8") pod "cilium-bh8vn" (UID: "0cf8447f-4fb8-4561-a50d-aa041f55e60d") : configmap "kube-root-ca.crt" not found Oct 2 22:03:27.654834 env[1354]: time="2023-10-02T22:03:27.654446681Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-kpfr7,Uid:c90cbdba-a295-41b9-881d-3857e33c6b2f,Namespace:kube-system,Attempt:0,}" Oct 2 22:03:27.659143 env[1354]: time="2023-10-02T22:03:27.659067332Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-bh8vn,Uid:0cf8447f-4fb8-4561-a50d-aa041f55e60d,Namespace:kube-system,Attempt:0,}" Oct 2 22:03:27.678591 kubelet[2452]: I1002 22:03:27.678535 2452 topology_manager.go:212] "Topology Admit Handler" Oct 2 22:03:27.683530 systemd[1]: Created slice kubepods-besteffort-podd43e3694_4915_48db_88b7_1bca4a425443.slice. Oct 2 22:03:27.738981 env[1354]: time="2023-10-02T22:03:27.737229090Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 22:03:27.738981 env[1354]: time="2023-10-02T22:03:27.737309970Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 22:03:27.738981 env[1354]: time="2023-10-02T22:03:27.737338051Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 22:03:27.738981 env[1354]: time="2023-10-02T22:03:27.737495051Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6672a167e773e99043a082bca2d9c8e2b4b332fc80e3351cf2ebb315a34f3666 pid=2538 runtime=io.containerd.runc.v2 Oct 2 22:03:27.739509 env[1354]: time="2023-10-02T22:03:27.739445776Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 22:03:27.739509 env[1354]: time="2023-10-02T22:03:27.739481376Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 22:03:27.739509 env[1354]: time="2023-10-02T22:03:27.739491736Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 22:03:27.739848 env[1354]: time="2023-10-02T22:03:27.739783577Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c pid=2535 runtime=io.containerd.runc.v2 Oct 2 22:03:27.755118 systemd[1]: Started cri-containerd-3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c.scope. Oct 2 22:03:27.759213 systemd[1]: Started cri-containerd-6672a167e773e99043a082bca2d9c8e2b4b332fc80e3351cf2ebb315a34f3666.scope. Oct 2 22:03:27.777461 kubelet[2452]: I1002 22:03:27.777423 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d43e3694-4915-48db-88b7-1bca4a425443-cilium-config-path\") pod \"cilium-operator-574c4bb98d-6j8gv\" (UID: \"d43e3694-4915-48db-88b7-1bca4a425443\") " pod="kube-system/cilium-operator-574c4bb98d-6j8gv" Oct 2 22:03:27.777461 kubelet[2452]: I1002 22:03:27.777470 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gnqpl\" (UniqueName: \"kubernetes.io/projected/d43e3694-4915-48db-88b7-1bca4a425443-kube-api-access-gnqpl\") pod \"cilium-operator-574c4bb98d-6j8gv\" (UID: \"d43e3694-4915-48db-88b7-1bca4a425443\") " pod="kube-system/cilium-operator-574c4bb98d-6j8gv" Oct 2 22:03:27.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.779000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.779000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.779000 audit: BPF prog-id=113 op=LOAD Oct 2 22:03:27.780000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.780000 audit[2551]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2538 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636373261313637653737336539393034336130383262636132643963 Oct 2 22:03:27.780000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.780000 audit[2551]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2538 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636373261313637653737336539393034336130383262636132643963 Oct 2 22:03:27.780000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.780000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.780000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.780000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.780000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.780000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.780000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.780000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.780000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.780000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.780000 audit: BPF prog-id=114 op=LOAD Oct 2 22:03:27.780000 audit[2551]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2538 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636373261313637653737336539393034336130383262636132643963 Oct 2 22:03:27.781000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.781000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.781000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.781000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.781000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.781000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.781000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.781000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.781000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.781000 audit: BPF prog-id=115 op=LOAD Oct 2 22:03:27.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit: BPF prog-id=116 op=LOAD Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2535 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362313933393039376232356535613038653835386237636461626332 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2535 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362313933393039376232356535613038653835386237636461626332 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit: BPF prog-id=117 op=LOAD Oct 2 22:03:27.782000 audit[2555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2535 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362313933393039376232356535613038653835386237636461626332 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.782000 audit: BPF prog-id=118 op=LOAD Oct 2 22:03:27.782000 audit[2555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2535 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362313933393039376232356535613038653835386237636461626332 Oct 2 22:03:27.782000 audit: BPF prog-id=118 op=UNLOAD Oct 2 22:03:27.782000 audit: BPF prog-id=117 op=UNLOAD Oct 2 22:03:27.783000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2555]: AVC avc: denied { perfmon } for pid=2555 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.781000 audit[2551]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2538 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636373261313637653737336539393034336130383262636132643963 Oct 2 22:03:27.783000 audit: BPF prog-id=115 op=UNLOAD Oct 2 22:03:27.783000 audit: BPF prog-id=114 op=UNLOAD Oct 2 22:03:27.783000 audit[2555]: AVC avc: denied { bpf } for pid=2555 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit: BPF prog-id=119 op=LOAD Oct 2 22:03:27.783000 audit[2555]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2535 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362313933393039376232356535613038653835386237636461626332 Oct 2 22:03:27.783000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2551]: AVC avc: denied { perfmon } for pid=2551 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit[2551]: AVC avc: denied { bpf } for pid=2551 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.783000 audit: BPF prog-id=120 op=LOAD Oct 2 22:03:27.783000 audit[2551]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2538 pid=2551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636373261313637653737336539393034336130383262636132643963 Oct 2 22:03:27.803057 env[1354]: time="2023-10-02T22:03:27.802993697Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-kpfr7,Uid:c90cbdba-a295-41b9-881d-3857e33c6b2f,Namespace:kube-system,Attempt:0,} returns sandbox id \"6672a167e773e99043a082bca2d9c8e2b4b332fc80e3351cf2ebb315a34f3666\"" Oct 2 22:03:27.807931 env[1354]: time="2023-10-02T22:03:27.807896909Z" level=info msg="CreateContainer within sandbox \"6672a167e773e99043a082bca2d9c8e2b4b332fc80e3351cf2ebb315a34f3666\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 22:03:27.816085 env[1354]: time="2023-10-02T22:03:27.816038770Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-bh8vn,Uid:0cf8447f-4fb8-4561-a50d-aa041f55e60d,Namespace:kube-system,Attempt:0,} returns sandbox id \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\"" Oct 2 22:03:27.817740 env[1354]: time="2023-10-02T22:03:27.817712534Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 22:03:27.840811 env[1354]: time="2023-10-02T22:03:27.840755993Z" level=info msg="CreateContainer within sandbox \"6672a167e773e99043a082bca2d9c8e2b4b332fc80e3351cf2ebb315a34f3666\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"5da69bee23299ed381856219084a60f617f975d60bba7991cd9bbf9cfe28a897\"" Oct 2 22:03:27.842193 env[1354]: time="2023-10-02T22:03:27.842167116Z" level=info msg="StartContainer for \"5da69bee23299ed381856219084a60f617f975d60bba7991cd9bbf9cfe28a897\"" Oct 2 22:03:27.863128 systemd[1]: Started cri-containerd-5da69bee23299ed381856219084a60f617f975d60bba7991cd9bbf9cfe28a897.scope. Oct 2 22:03:27.887000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.887000 audit[2613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2538 pid=2613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564613639626565323332393965643338313835363231393038346136 Oct 2 22:03:27.887000 audit[2613]: AVC avc: denied { bpf } for pid=2613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.887000 audit[2613]: AVC avc: denied { bpf } for pid=2613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.887000 audit[2613]: AVC avc: denied { bpf } for pid=2613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.887000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.887000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.887000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.887000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.887000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.887000 audit[2613]: AVC avc: denied { bpf } for pid=2613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.887000 audit[2613]: AVC avc: denied { bpf } for pid=2613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.887000 audit: BPF prog-id=121 op=LOAD Oct 2 22:03:27.887000 audit[2613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2538 pid=2613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564613639626565323332393965643338313835363231393038346136 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { bpf } for pid=2613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { bpf } for pid=2613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { bpf } for pid=2613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { bpf } for pid=2613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit: BPF prog-id=122 op=LOAD Oct 2 22:03:27.888000 audit[2613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2538 pid=2613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564613639626565323332393965643338313835363231393038346136 Oct 2 22:03:27.888000 audit: BPF prog-id=122 op=UNLOAD Oct 2 22:03:27.888000 audit: BPF prog-id=121 op=UNLOAD Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { bpf } for pid=2613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { bpf } for pid=2613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { bpf } for pid=2613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { perfmon } for pid=2613 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { bpf } for pid=2613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit[2613]: AVC avc: denied { bpf } for pid=2613 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:27.888000 audit: BPF prog-id=123 op=LOAD Oct 2 22:03:27.888000 audit[2613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2538 pid=2613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564613639626565323332393965643338313835363231393038346136 Oct 2 22:03:27.914428 env[1354]: time="2023-10-02T22:03:27.914268459Z" level=info msg="StartContainer for \"5da69bee23299ed381856219084a60f617f975d60bba7991cd9bbf9cfe28a897\" returns successfully" Oct 2 22:03:27.994988 env[1354]: time="2023-10-02T22:03:27.994934223Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-6j8gv,Uid:d43e3694-4915-48db-88b7-1bca4a425443,Namespace:kube-system,Attempt:0,}" Oct 2 22:03:27.994000 audit[2663]: NETFILTER_CFG table=mangle:41 family=2 entries=1 op=nft_register_chain pid=2663 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:27.994000 audit[2663]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcf5b35d0 a2=0 a3=ffffb45596c0 items=0 ppid=2624 pid=2663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.994000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 22:03:27.996000 audit[2664]: NETFILTER_CFG table=mangle:42 family=10 entries=1 op=nft_register_chain pid=2664 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:27.996000 audit[2664]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd891c2f0 a2=0 a3=ffff911946c0 items=0 ppid=2624 pid=2664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:27.996000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 22:03:28.001000 audit[2665]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_chain pid=2665 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.001000 audit[2665]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe0e70620 a2=0 a3=ffff80ef66c0 items=0 ppid=2624 pid=2665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.001000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 22:03:28.002000 audit[2666]: NETFILTER_CFG table=nat:44 family=10 entries=1 op=nft_register_chain pid=2666 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.002000 audit[2666]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff4d17d90 a2=0 a3=ffffb103b6c0 items=0 ppid=2624 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.002000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 22:03:28.005000 audit[2668]: NETFILTER_CFG table=filter:45 family=10 entries=1 op=nft_register_chain pid=2668 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.005000 audit[2668]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdccfce80 a2=0 a3=ffffb2c656c0 items=0 ppid=2624 pid=2668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.005000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 22:03:28.005000 audit[2667]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_chain pid=2667 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.005000 audit[2667]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc3343370 a2=0 a3=ffffbb2916c0 items=0 ppid=2624 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.005000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 22:03:28.035099 env[1354]: time="2023-10-02T22:03:28.035016003Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 22:03:28.035331 env[1354]: time="2023-10-02T22:03:28.035103484Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 22:03:28.035331 env[1354]: time="2023-10-02T22:03:28.035140044Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 22:03:28.035568 env[1354]: time="2023-10-02T22:03:28.035530765Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428 pid=2679 runtime=io.containerd.runc.v2 Oct 2 22:03:28.051967 systemd[1]: Started cri-containerd-16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428.scope. Oct 2 22:03:28.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.070000 audit: BPF prog-id=124 op=LOAD Oct 2 22:03:28.070000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.070000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2679 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136613930646639306639386364636431386430623434393866316334 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2679 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136613930646639306639386364636431386430623434393866316334 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit: BPF prog-id=125 op=LOAD Oct 2 22:03:28.071000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2679 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136613930646639306639386364636431386430623434393866316334 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit: BPF prog-id=126 op=LOAD Oct 2 22:03:28.071000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2679 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136613930646639306639386364636431386430623434393866316334 Oct 2 22:03:28.071000 audit: BPF prog-id=126 op=UNLOAD Oct 2 22:03:28.071000 audit: BPF prog-id=125 op=UNLOAD Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:28.071000 audit: BPF prog-id=127 op=LOAD Oct 2 22:03:28.071000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2679 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136613930646639306639386364636431386430623434393866316334 Oct 2 22:03:28.096421 env[1354]: time="2023-10-02T22:03:28.096357196Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-6j8gv,Uid:d43e3694-4915-48db-88b7-1bca4a425443,Namespace:kube-system,Attempt:0,} returns sandbox id \"16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428\"" Oct 2 22:03:28.098000 audit[2711]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.098000 audit[2711]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe9dd9c50 a2=0 a3=ffffad4c16c0 items=0 ppid=2624 pid=2711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.098000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 22:03:28.103000 audit[2713]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.103000 audit[2713]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffed5cd530 a2=0 a3=ffff86e316c0 items=0 ppid=2624 pid=2713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.103000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 22:03:28.108000 audit[2716]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2716 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.108000 audit[2716]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff18abe70 a2=0 a3=ffffac3366c0 items=0 ppid=2624 pid=2716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.108000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 22:03:28.110000 audit[2717]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_chain pid=2717 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.110000 audit[2717]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd99d7df0 a2=0 a3=ffff93b0e6c0 items=0 ppid=2624 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.110000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 22:03:28.114000 audit[2719]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2719 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.114000 audit[2719]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd0f68c90 a2=0 a3=ffff945466c0 items=0 ppid=2624 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.114000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 22:03:28.115000 audit[2720]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2720 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.115000 audit[2720]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe48c8eb0 a2=0 a3=ffff9809f6c0 items=0 ppid=2624 pid=2720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.115000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 22:03:28.118000 audit[2722]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2722 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.118000 audit[2722]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffefb8a6d0 a2=0 a3=ffffb79fa6c0 items=0 ppid=2624 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.118000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 22:03:28.123000 audit[2725]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2725 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.123000 audit[2725]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffff26f820 a2=0 a3=ffff937966c0 items=0 ppid=2624 pid=2725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.123000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 22:03:28.124000 audit[2726]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_chain pid=2726 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.124000 audit[2726]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcc5c40c0 a2=0 a3=ffff9e2ff6c0 items=0 ppid=2624 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.124000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 22:03:28.127000 audit[2728]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2728 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.127000 audit[2728]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcba0ac70 a2=0 a3=ffff991496c0 items=0 ppid=2624 pid=2728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.127000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 22:03:28.129000 audit[2729]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_chain pid=2729 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.129000 audit[2729]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdbd2cb40 a2=0 a3=ffff84ca66c0 items=0 ppid=2624 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.129000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 22:03:28.132000 audit[2731]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_rule pid=2731 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.132000 audit[2731]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd605b630 a2=0 a3=ffff8ffb76c0 items=0 ppid=2624 pid=2731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.132000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 22:03:28.138000 audit[2734]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2734 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.138000 audit[2734]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffee91ac70 a2=0 a3=ffffb2a5c6c0 items=0 ppid=2624 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.138000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 22:03:28.143000 audit[2737]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2737 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.143000 audit[2737]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe7f80360 a2=0 a3=ffffa43bc6c0 items=0 ppid=2624 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.143000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 22:03:28.144000 audit[2738]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2738 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.144000 audit[2738]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffddc38f00 a2=0 a3=ffffbc7d06c0 items=0 ppid=2624 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.144000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 22:03:28.148000 audit[2740]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2740 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.148000 audit[2740]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffe18fe450 a2=0 a3=ffff90a1d6c0 items=0 ppid=2624 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.148000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 22:03:28.152000 audit[2743]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2743 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.152000 audit[2743]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd89cb2c0 a2=0 a3=ffff9adb46c0 items=0 ppid=2624 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.152000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 22:03:28.164000 audit[2748]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_chain pid=2748 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.164000 audit[2748]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffef7f9210 a2=0 a3=ffff95b816c0 items=0 ppid=2624 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.164000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 22:03:28.171000 audit[2750]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_rule pid=2750 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 22:03:28.171000 audit[2750]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=fffff21a8ed0 a2=0 a3=ffffa00fa6c0 items=0 ppid=2624 pid=2750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.171000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 22:03:28.239000 audit[2752]: NETFILTER_CFG table=filter:66 family=2 entries=8 op=nft_register_rule pid=2752 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 22:03:28.239000 audit[2752]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffc4a888e0 a2=0 a3=ffffa65306c0 items=0 ppid=2624 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.239000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 22:03:28.243840 kubelet[2452]: I1002 22:03:28.243556 2452 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-kpfr7" podStartSLOduration=2.243517643 podCreationTimestamp="2023-10-02 22:03:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 22:03:28.243470523 +0000 UTC m=+16.300140043" watchObservedRunningTime="2023-10-02 22:03:28.243517643 +0000 UTC m=+16.300187123" Oct 2 22:03:28.265000 audit[2752]: NETFILTER_CFG table=nat:67 family=2 entries=14 op=nft_register_chain pid=2752 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 22:03:28.265000 audit[2752]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffc4a888e0 a2=0 a3=ffffa65306c0 items=0 ppid=2624 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.265000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 22:03:28.267000 audit[2757]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2757 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.267000 audit[2757]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc9929120 a2=0 a3=ffffa8cf06c0 items=0 ppid=2624 pid=2757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.267000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 22:03:28.272000 audit[2759]: NETFILTER_CFG table=filter:69 family=10 entries=2 op=nft_register_chain pid=2759 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.272000 audit[2759]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffffcedf5a0 a2=0 a3=ffff8b2fc6c0 items=0 ppid=2624 pid=2759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.272000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 22:03:28.280000 audit[2762]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2762 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.280000 audit[2762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe50f21f0 a2=0 a3=ffff8b10b6c0 items=0 ppid=2624 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.280000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 22:03:28.283000 audit[2763]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_chain pid=2763 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.283000 audit[2763]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe85ecb20 a2=0 a3=ffff924ee6c0 items=0 ppid=2624 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.283000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 22:03:28.287000 audit[2765]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_rule pid=2765 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.287000 audit[2765]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffff0aefc0 a2=0 a3=ffff846b86c0 items=0 ppid=2624 pid=2765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.287000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 22:03:28.289000 audit[2766]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2766 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.289000 audit[2766]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe6920160 a2=0 a3=ffff8ba696c0 items=0 ppid=2624 pid=2766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.289000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 22:03:28.292000 audit[2768]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2768 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.292000 audit[2768]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff1dc38f0 a2=0 a3=ffffb20b86c0 items=0 ppid=2624 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.292000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 22:03:28.297000 audit[2771]: NETFILTER_CFG table=filter:75 family=10 entries=2 op=nft_register_chain pid=2771 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.297000 audit[2771]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffd57feff0 a2=0 a3=ffff892856c0 items=0 ppid=2624 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.297000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 22:03:28.298000 audit[2772]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_chain pid=2772 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.298000 audit[2772]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdf49b480 a2=0 a3=ffffa5cd86c0 items=0 ppid=2624 pid=2772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.298000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 22:03:28.302000 audit[2774]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2774 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.302000 audit[2774]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffea0eac30 a2=0 a3=ffffa533b6c0 items=0 ppid=2624 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.302000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 22:03:28.303000 audit[2775]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_chain pid=2775 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.303000 audit[2775]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdd79a060 a2=0 a3=ffffae7436c0 items=0 ppid=2624 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.303000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 22:03:28.307000 audit[2777]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=2777 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.307000 audit[2777]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff19b2b80 a2=0 a3=ffffa13526c0 items=0 ppid=2624 pid=2777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.307000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 22:03:28.311000 audit[2780]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2780 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.311000 audit[2780]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd15d0d10 a2=0 a3=ffffbd5086c0 items=0 ppid=2624 pid=2780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.311000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 22:03:28.316000 audit[2783]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2783 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.316000 audit[2783]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd9a1f310 a2=0 a3=ffff9cf806c0 items=0 ppid=2624 pid=2783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.316000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 22:03:28.318000 audit[2784]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2784 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.318000 audit[2784]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd6c6a890 a2=0 a3=ffff9a4c46c0 items=0 ppid=2624 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.318000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 22:03:28.321000 audit[2786]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2786 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.321000 audit[2786]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff556a5d0 a2=0 a3=ffffb79a46c0 items=0 ppid=2624 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.321000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 22:03:28.325000 audit[2789]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2789 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.325000 audit[2789]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffe56ff390 a2=0 a3=ffffb9bf76c0 items=0 ppid=2624 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.325000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 22:03:28.327000 audit[2790]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_chain pid=2790 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.327000 audit[2790]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffedb330b0 a2=0 a3=ffffb6e406c0 items=0 ppid=2624 pid=2790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.327000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 22:03:28.330000 audit[2792]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2792 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.330000 audit[2792]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc6a50420 a2=0 a3=ffffb8faf6c0 items=0 ppid=2624 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.330000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 22:03:28.336000 audit[2795]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_rule pid=2795 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.336000 audit[2795]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd0f60a80 a2=0 a3=ffff8a7f86c0 items=0 ppid=2624 pid=2795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.336000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 22:03:28.338000 audit[2796]: NETFILTER_CFG table=nat:88 family=10 entries=1 op=nft_register_chain pid=2796 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.338000 audit[2796]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffc0bff80 a2=0 a3=ffff9351e6c0 items=0 ppid=2624 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.338000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 22:03:28.341000 audit[2798]: NETFILTER_CFG table=nat:89 family=10 entries=2 op=nft_register_chain pid=2798 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 22:03:28.341000 audit[2798]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffffad41580 a2=0 a3=ffffa517d6c0 items=0 ppid=2624 pid=2798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.341000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 22:03:28.344000 audit[2800]: NETFILTER_CFG table=filter:90 family=10 entries=3 op=nft_register_rule pid=2800 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 22:03:28.344000 audit[2800]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffe700b310 a2=0 a3=ffff846106c0 items=0 ppid=2624 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.344000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 22:03:28.345000 audit[2800]: NETFILTER_CFG table=nat:91 family=10 entries=7 op=nft_register_chain pid=2800 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 22:03:28.345000 audit[2800]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffe700b310 a2=0 a3=ffff846106c0 items=0 ppid=2624 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:28.345000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 22:03:32.445462 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2668089011.mount: Deactivated successfully. Oct 2 22:03:34.548195 env[1354]: time="2023-10-02T22:03:34.548136238Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:34.556360 env[1354]: time="2023-10-02T22:03:34.556317537Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:34.566546 env[1354]: time="2023-10-02T22:03:34.566501560Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:34.567309 env[1354]: time="2023-10-02T22:03:34.567277682Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:b69cb5ebb22d9b4f9c460a6587a0c4285d57a2bff59e4e439ad065a3f684948f\"" Oct 2 22:03:34.570079 env[1354]: time="2023-10-02T22:03:34.570047208Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 22:03:34.571685 env[1354]: time="2023-10-02T22:03:34.571652051Z" level=info msg="CreateContainer within sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 22:03:34.596865 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount121245703.mount: Deactivated successfully. Oct 2 22:03:34.602745 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3552971839.mount: Deactivated successfully. Oct 2 22:03:34.614811 env[1354]: time="2023-10-02T22:03:34.614748790Z" level=info msg="CreateContainer within sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377\"" Oct 2 22:03:34.616406 env[1354]: time="2023-10-02T22:03:34.616356553Z" level=info msg="StartContainer for \"5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377\"" Oct 2 22:03:34.639482 systemd[1]: Started cri-containerd-5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377.scope. Oct 2 22:03:34.656003 systemd[1]: cri-containerd-5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377.scope: Deactivated successfully. Oct 2 22:03:35.594915 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377-rootfs.mount: Deactivated successfully. Oct 2 22:03:36.335067 env[1354]: time="2023-10-02T22:03:36.335020050Z" level=info msg="shim disconnected" id=5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377 Oct 2 22:03:36.335438 env[1354]: time="2023-10-02T22:03:36.335417531Z" level=warning msg="cleaning up after shim disconnected" id=5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377 namespace=k8s.io Oct 2 22:03:36.335523 env[1354]: time="2023-10-02T22:03:36.335509251Z" level=info msg="cleaning up dead shim" Oct 2 22:03:36.347381 env[1354]: time="2023-10-02T22:03:36.347338237Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:03:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2830 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:03:36Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:03:36.347813 env[1354]: time="2023-10-02T22:03:36.347722918Z" level=error msg="copy shim log" error="read /proc/self/fd/53: file already closed" Oct 2 22:03:36.351067 env[1354]: time="2023-10-02T22:03:36.351018005Z" level=error msg="Failed to pipe stderr of container \"5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377\"" error="reading from a closed fifo" Oct 2 22:03:36.351148 env[1354]: time="2023-10-02T22:03:36.351094605Z" level=error msg="Failed to pipe stdout of container \"5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377\"" error="reading from a closed fifo" Oct 2 22:03:36.355424 env[1354]: time="2023-10-02T22:03:36.355366775Z" level=error msg="StartContainer for \"5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:03:36.355674 kubelet[2452]: E1002 22:03:36.355647 2452 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377" Oct 2 22:03:36.355920 kubelet[2452]: E1002 22:03:36.355778 2452 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:03:36.355920 kubelet[2452]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:03:36.355920 kubelet[2452]: rm /hostbin/cilium-mount Oct 2 22:03:36.356017 kubelet[2452]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cmlh8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:03:36.356017 kubelet[2452]: E1002 22:03:36.355814 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:03:37.256268 env[1354]: time="2023-10-02T22:03:37.254863676Z" level=info msg="CreateContainer within sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 22:03:37.282209 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2623962184.mount: Deactivated successfully. Oct 2 22:03:37.292851 env[1354]: time="2023-10-02T22:03:37.292806999Z" level=info msg="CreateContainer within sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193\"" Oct 2 22:03:37.293876 env[1354]: time="2023-10-02T22:03:37.293838881Z" level=info msg="StartContainer for \"2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193\"" Oct 2 22:03:37.329853 systemd[1]: Started cri-containerd-2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193.scope. Oct 2 22:03:37.348190 systemd[1]: cri-containerd-2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193.scope: Deactivated successfully. Oct 2 22:03:37.368052 env[1354]: time="2023-10-02T22:03:37.367999443Z" level=info msg="shim disconnected" id=2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193 Oct 2 22:03:37.368052 env[1354]: time="2023-10-02T22:03:37.368048243Z" level=warning msg="cleaning up after shim disconnected" id=2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193 namespace=k8s.io Oct 2 22:03:37.368052 env[1354]: time="2023-10-02T22:03:37.368058083Z" level=info msg="cleaning up dead shim" Oct 2 22:03:37.381179 env[1354]: time="2023-10-02T22:03:37.381127592Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:03:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2865 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:03:37Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:03:37.381397 env[1354]: time="2023-10-02T22:03:37.381341192Z" level=error msg="copy shim log" error="read /proc/self/fd/59: file already closed" Oct 2 22:03:37.381570 env[1354]: time="2023-10-02T22:03:37.381534953Z" level=error msg="Failed to pipe stderr of container \"2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193\"" error="reading from a closed fifo" Oct 2 22:03:37.382502 env[1354]: time="2023-10-02T22:03:37.382385114Z" level=error msg="Failed to pipe stdout of container \"2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193\"" error="reading from a closed fifo" Oct 2 22:03:37.386319 env[1354]: time="2023-10-02T22:03:37.386263763Z" level=error msg="StartContainer for \"2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:03:37.386612 kubelet[2452]: E1002 22:03:37.386586 2452 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193" Oct 2 22:03:37.386931 kubelet[2452]: E1002 22:03:37.386699 2452 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:03:37.386931 kubelet[2452]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:03:37.386931 kubelet[2452]: rm /hostbin/cilium-mount Oct 2 22:03:37.386931 kubelet[2452]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cmlh8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:03:37.386931 kubelet[2452]: E1002 22:03:37.386733 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:03:37.923456 env[1354]: time="2023-10-02T22:03:37.923389174Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:37.928423 env[1354]: time="2023-10-02T22:03:37.928376625Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:37.932440 env[1354]: time="2023-10-02T22:03:37.932410434Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 22:03:37.932906 env[1354]: time="2023-10-02T22:03:37.932878115Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:59357949c22410bca94f8bb5a7a7f73d575949bc16ddc4bd8c740843d4254180\"" Oct 2 22:03:37.936900 env[1354]: time="2023-10-02T22:03:37.936871604Z" level=info msg="CreateContainer within sandbox \"16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 22:03:37.963213 env[1354]: time="2023-10-02T22:03:37.963150101Z" level=info msg="CreateContainer within sandbox \"16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073\"" Oct 2 22:03:37.964655 env[1354]: time="2023-10-02T22:03:37.964296304Z" level=info msg="StartContainer for \"65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073\"" Oct 2 22:03:37.985327 systemd[1]: Started cri-containerd-65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073.scope. Oct 2 22:03:38.008977 kernel: kauditd_printk_skb: 372 callbacks suppressed Oct 2 22:03:38.009096 kernel: audit: type=1400 audit(1696284218.001:1083): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044961 kernel: audit: type=1400 audit(1696284218.001:1084): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.064822 kernel: audit: type=1400 audit(1696284218.001:1085): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.083560 kernel: audit: type=1400 audit(1696284218.001:1086): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.106396 kernel: audit: type=1400 audit(1696284218.001:1087): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.126263 kernel: audit: type=1400 audit(1696284218.001:1088): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.144708 kernel: audit: type=1400 audit(1696284218.001:1089): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.163226 kernel: audit: type=1400 audit(1696284218.001:1090): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.181279 kernel: audit: type=1400 audit(1696284218.001:1091): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.200021 kernel: audit: type=1400 audit(1696284218.006:1092): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.006000 audit: BPF prog-id=128 op=LOAD Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { bpf } for pid=2886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2679 pid=2886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:38.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635663530373335643564313834643465353132313739366361313864 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2679 pid=2886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:38.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635663530373335643564313834643465353132313739366361313864 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { bpf } for pid=2886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { bpf } for pid=2886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { bpf } for pid=2886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { bpf } for pid=2886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { bpf } for pid=2886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit: BPF prog-id=129 op=LOAD Oct 2 22:03:38.044000 audit[2886]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2679 pid=2886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:38.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635663530373335643564313834643465353132313739366361313864 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { bpf } for pid=2886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { bpf } for pid=2886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { bpf } for pid=2886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit[2886]: AVC avc: denied { bpf } for pid=2886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.044000 audit: BPF prog-id=130 op=LOAD Oct 2 22:03:38.044000 audit[2886]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2679 pid=2886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:38.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635663530373335643564313834643465353132313739366361313864 Oct 2 22:03:38.045000 audit: BPF prog-id=130 op=UNLOAD Oct 2 22:03:38.045000 audit: BPF prog-id=129 op=UNLOAD Oct 2 22:03:38.045000 audit[2886]: AVC avc: denied { bpf } for pid=2886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.045000 audit[2886]: AVC avc: denied { bpf } for pid=2886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.045000 audit[2886]: AVC avc: denied { bpf } for pid=2886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.045000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.045000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.045000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.045000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.045000 audit[2886]: AVC avc: denied { perfmon } for pid=2886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.045000 audit[2886]: AVC avc: denied { bpf } for pid=2886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.045000 audit[2886]: AVC avc: denied { bpf } for pid=2886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:03:38.045000 audit: BPF prog-id=131 op=LOAD Oct 2 22:03:38.045000 audit[2886]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2679 pid=2886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:03:38.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635663530373335643564313834643465353132313739366361313864 Oct 2 22:03:38.204570 env[1354]: time="2023-10-02T22:03:38.204530501Z" level=info msg="StartContainer for \"65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073\" returns successfully" Oct 2 22:03:38.217000 audit[2897]: AVC avc: denied { map_create } for pid=2897 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c286,c949 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c286,c949 tclass=bpf permissive=0 Oct 2 22:03:38.217000 audit[2897]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=4000653768 a2=48 a3=0 items=0 ppid=2679 pid=2897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c286,c949 key=(null) Oct 2 22:03:38.217000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 22:03:38.255618 kubelet[2452]: I1002 22:03:38.254805 2452 scope.go:115] "RemoveContainer" containerID="5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377" Oct 2 22:03:38.255618 kubelet[2452]: I1002 22:03:38.255116 2452 scope.go:115] "RemoveContainer" containerID="5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377" Oct 2 22:03:38.257038 env[1354]: time="2023-10-02T22:03:38.257005494Z" level=info msg="RemoveContainer for \"5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377\"" Oct 2 22:03:38.259338 env[1354]: time="2023-10-02T22:03:38.257793216Z" level=info msg="RemoveContainer for \"5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377\"" Oct 2 22:03:38.259606 env[1354]: time="2023-10-02T22:03:38.259573980Z" level=error msg="RemoveContainer for \"5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377\" failed" error="failed to set removing state for container \"5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377\": container is already in removing state" Oct 2 22:03:38.260850 kubelet[2452]: E1002 22:03:38.259865 2452 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377\": container is already in removing state" containerID="5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377" Oct 2 22:03:38.260850 kubelet[2452]: E1002 22:03:38.259907 2452 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377": container is already in removing state; Skipping pod "cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)" Oct 2 22:03:38.261479 kubelet[2452]: E1002 22:03:38.261292 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:03:38.277626 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1079142753.mount: Deactivated successfully. Oct 2 22:03:38.286176 env[1354]: time="2023-10-02T22:03:38.286140517Z" level=info msg="RemoveContainer for \"5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377\" returns successfully" Oct 2 22:03:38.290711 kubelet[2452]: I1002 22:03:38.290684 2452 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-6j8gv" podStartSLOduration=1.45510525 podCreationTimestamp="2023-10-02 22:03:27 +0000 UTC" firstStartedPulling="2023-10-02 22:03:28.097609359 +0000 UTC m=+16.154278839" lastFinishedPulling="2023-10-02 22:03:37.933151636 +0000 UTC m=+25.989821156" observedRunningTime="2023-10-02 22:03:38.266582115 +0000 UTC m=+26.323251675" watchObservedRunningTime="2023-10-02 22:03:38.290647567 +0000 UTC m=+26.347317047" Oct 2 22:03:39.257731 kubelet[2452]: E1002 22:03:39.257699 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:03:39.443436 kubelet[2452]: W1002 22:03:39.443389 2452 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod0cf8447f_4fb8_4561_a50d_aa041f55e60d.slice/cri-containerd-5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377.scope WatchSource:0}: container "5876a892d5e2845466bd117791a325ebe3b245ffd67e1daa00bd721c46483377" in namespace "k8s.io": not found Oct 2 22:03:42.549981 kubelet[2452]: W1002 22:03:42.549919 2452 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod0cf8447f_4fb8_4561_a50d_aa041f55e60d.slice/cri-containerd-2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193.scope WatchSource:0}: task 2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193 not found: not found Oct 2 22:03:52.165336 env[1354]: time="2023-10-02T22:03:52.165279581Z" level=info msg="CreateContainer within sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 22:03:52.188058 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3595801364.mount: Deactivated successfully. Oct 2 22:03:52.199789 env[1354]: time="2023-10-02T22:03:52.199741724Z" level=info msg="CreateContainer within sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc\"" Oct 2 22:03:52.200348 env[1354]: time="2023-10-02T22:03:52.200236885Z" level=info msg="StartContainer for \"db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc\"" Oct 2 22:03:52.223572 systemd[1]: Started cri-containerd-db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc.scope. Oct 2 22:03:52.238871 systemd[1]: cri-containerd-db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc.scope: Deactivated successfully. Oct 2 22:03:52.595627 env[1354]: time="2023-10-02T22:03:52.595574126Z" level=info msg="shim disconnected" id=db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc Oct 2 22:03:52.595824 env[1354]: time="2023-10-02T22:03:52.595639286Z" level=warning msg="cleaning up after shim disconnected" id=db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc namespace=k8s.io Oct 2 22:03:52.595824 env[1354]: time="2023-10-02T22:03:52.595649686Z" level=info msg="cleaning up dead shim" Oct 2 22:03:52.609193 env[1354]: time="2023-10-02T22:03:52.609142231Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:03:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2942 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:03:52Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:03:52.609482 env[1354]: time="2023-10-02T22:03:52.609421071Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 22:03:52.611039 env[1354]: time="2023-10-02T22:03:52.610999874Z" level=error msg="Failed to pipe stdout of container \"db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc\"" error="reading from a closed fifo" Oct 2 22:03:52.611176 env[1354]: time="2023-10-02T22:03:52.611139394Z" level=error msg="Failed to pipe stderr of container \"db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc\"" error="reading from a closed fifo" Oct 2 22:03:52.615067 env[1354]: time="2023-10-02T22:03:52.615023441Z" level=error msg="StartContainer for \"db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:03:52.615586 kubelet[2452]: E1002 22:03:52.615389 2452 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc" Oct 2 22:03:52.615586 kubelet[2452]: E1002 22:03:52.615518 2452 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:03:52.615586 kubelet[2452]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:03:52.615586 kubelet[2452]: rm /hostbin/cilium-mount Oct 2 22:03:52.615586 kubelet[2452]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cmlh8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:03:52.615586 kubelet[2452]: E1002 22:03:52.615553 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:03:53.185128 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc-rootfs.mount: Deactivated successfully. Oct 2 22:03:53.280386 kubelet[2452]: I1002 22:03:53.280361 2452 scope.go:115] "RemoveContainer" containerID="2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193" Oct 2 22:03:53.280863 kubelet[2452]: I1002 22:03:53.280848 2452 scope.go:115] "RemoveContainer" containerID="2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193" Oct 2 22:03:53.283254 env[1354]: time="2023-10-02T22:03:53.283220174Z" level=info msg="RemoveContainer for \"2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193\"" Oct 2 22:03:53.285239 env[1354]: time="2023-10-02T22:03:53.284953778Z" level=info msg="RemoveContainer for \"2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193\"" Oct 2 22:03:53.285416 env[1354]: time="2023-10-02T22:03:53.285383938Z" level=error msg="RemoveContainer for \"2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193\" failed" error="failed to set removing state for container \"2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193\": container is already in removing state" Oct 2 22:03:53.285621 kubelet[2452]: E1002 22:03:53.285581 2452 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193\": container is already in removing state" containerID="2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193" Oct 2 22:03:53.285752 kubelet[2452]: E1002 22:03:53.285739 2452 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193": container is already in removing state; Skipping pod "cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)" Oct 2 22:03:53.286135 kubelet[2452]: E1002 22:03:53.286121 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:03:53.292032 env[1354]: time="2023-10-02T22:03:53.292008110Z" level=info msg="RemoveContainer for \"2a199f80ce850cf440a3a73bf6612b8a08035c73650d7d2c4e5173aba768f193\" returns successfully" Oct 2 22:03:55.699643 kubelet[2452]: W1002 22:03:55.699608 2452 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod0cf8447f_4fb8_4561_a50d_aa041f55e60d.slice/cri-containerd-db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc.scope WatchSource:0}: task db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc not found: not found Oct 2 22:04:06.160591 kubelet[2452]: E1002 22:04:06.160548 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:04:08.796000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:08.802716 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 22:04:08.802876 kernel: audit: type=1400 audit(1696284248.796:1102): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:08.796000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400930ed20 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:04:08.851988 kernel: audit: type=1300 audit(1696284248.796:1102): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400930ed20 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:04:08.796000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:08.877051 kernel: audit: type=1327 audit(1696284248.796:1102): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:08.813000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:08.900098 kernel: audit: type=1400 audit(1696284248.813:1103): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:08.900231 kernel: audit: type=1300 audit(1696284248.813:1103): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40096ef760 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:04:08.813000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40096ef760 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:04:08.813000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:08.952857 kernel: audit: type=1327 audit(1696284248.813:1103): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:08.953010 kernel: audit: type=1400 audit(1696284248.813:1104): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:08.813000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:08.813000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400932a120 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:04:09.003323 kernel: audit: type=1300 audit(1696284248.813:1104): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400932a120 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:04:08.813000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:09.029024 kernel: audit: type=1327 audit(1696284248.813:1104): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:08.833000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:09.051836 kernel: audit: type=1400 audit(1696284248.833:1105): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:08.833000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400932a1b0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:04:08.833000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:09.067000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:09.067000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:09.067000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400930ee70 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:04:09.067000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40096ef8e0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:04:09.067000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:09.067000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:04:09.117000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:09.117000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000612e40 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:04:09.117000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:04:09.117000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:09.117000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011b8080 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:04:09.117000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:04:20.165885 env[1354]: time="2023-10-02T22:04:20.164656166Z" level=info msg="CreateContainer within sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 22:04:20.188851 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1896067958.mount: Deactivated successfully. Oct 2 22:04:20.193371 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3610038965.mount: Deactivated successfully. Oct 2 22:04:20.206405 env[1354]: time="2023-10-02T22:04:20.206345027Z" level=info msg="CreateContainer within sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258\"" Oct 2 22:04:20.207111 env[1354]: time="2023-10-02T22:04:20.207071188Z" level=info msg="StartContainer for \"779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258\"" Oct 2 22:04:20.230675 systemd[1]: Started cri-containerd-779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258.scope. Oct 2 22:04:20.243953 systemd[1]: cri-containerd-779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258.scope: Deactivated successfully. Oct 2 22:04:20.285992 env[1354]: time="2023-10-02T22:04:20.285925665Z" level=info msg="shim disconnected" id=779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258 Oct 2 22:04:20.286235 env[1354]: time="2023-10-02T22:04:20.286215905Z" level=warning msg="cleaning up after shim disconnected" id=779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258 namespace=k8s.io Oct 2 22:04:20.286295 env[1354]: time="2023-10-02T22:04:20.286282585Z" level=info msg="cleaning up dead shim" Oct 2 22:04:20.298569 env[1354]: time="2023-10-02T22:04:20.298519723Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:04:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2984 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:04:20Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:04:20.299001 env[1354]: time="2023-10-02T22:04:20.298925644Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 22:04:20.300103 env[1354]: time="2023-10-02T22:04:20.299204725Z" level=error msg="Failed to pipe stdout of container \"779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258\"" error="reading from a closed fifo" Oct 2 22:04:20.300211 env[1354]: time="2023-10-02T22:04:20.299879206Z" level=error msg="Failed to pipe stderr of container \"779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258\"" error="reading from a closed fifo" Oct 2 22:04:20.305270 env[1354]: time="2023-10-02T22:04:20.305223693Z" level=error msg="StartContainer for \"779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:04:20.305584 kubelet[2452]: E1002 22:04:20.305561 2452 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258" Oct 2 22:04:20.305862 kubelet[2452]: E1002 22:04:20.305663 2452 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:04:20.305862 kubelet[2452]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:04:20.305862 kubelet[2452]: rm /hostbin/cilium-mount Oct 2 22:04:20.305862 kubelet[2452]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cmlh8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:04:20.305862 kubelet[2452]: E1002 22:04:20.305697 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:04:20.328190 kubelet[2452]: I1002 22:04:20.328161 2452 scope.go:115] "RemoveContainer" containerID="db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc" Oct 2 22:04:20.328519 kubelet[2452]: I1002 22:04:20.328495 2452 scope.go:115] "RemoveContainer" containerID="db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc" Oct 2 22:04:20.331140 env[1354]: time="2023-10-02T22:04:20.331074052Z" level=info msg="RemoveContainer for \"db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc\"" Oct 2 22:04:20.339730 env[1354]: time="2023-10-02T22:04:20.339698584Z" level=info msg="RemoveContainer for \"db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc\"" Oct 2 22:04:20.339936 env[1354]: time="2023-10-02T22:04:20.339905705Z" level=error msg="RemoveContainer for \"db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc\" failed" error="failed to set removing state for container \"db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc\": container is already in removing state" Oct 2 22:04:20.341813 kubelet[2452]: E1002 22:04:20.340219 2452 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc\": container is already in removing state" containerID="db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc" Oct 2 22:04:20.341813 kubelet[2452]: E1002 22:04:20.340252 2452 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc": container is already in removing state; Skipping pod "cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)" Oct 2 22:04:20.341813 kubelet[2452]: E1002 22:04:20.340560 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:04:20.346621 env[1354]: time="2023-10-02T22:04:20.346587595Z" level=info msg="RemoveContainer for \"db7cf60abf0dcf96751c6163b11108c716b9f8b6472149f6dcc4fe6c444655fc\" returns successfully" Oct 2 22:04:21.187051 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258-rootfs.mount: Deactivated successfully. Oct 2 22:04:23.390920 kubelet[2452]: W1002 22:04:23.390882 2452 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod0cf8447f_4fb8_4561_a50d_aa041f55e60d.slice/cri-containerd-779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258.scope WatchSource:0}: task 779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258 not found: not found Oct 2 22:04:24.162000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:24.169506 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 22:04:24.169588 kernel: audit: type=1400 audit(1696284264.162:1110): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:24.162000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400117e7a0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:04:24.227445 kernel: audit: type=1300 audit(1696284264.162:1110): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400117e7a0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:04:24.162000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:04:24.251937 kernel: audit: type=1327 audit(1696284264.162:1110): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:04:24.173000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:24.273939 kernel: audit: type=1400 audit(1696284264.173:1111): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:24.274085 kernel: audit: type=1300 audit(1696284264.173:1111): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40007f97e0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:04:24.173000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40007f97e0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:04:24.173000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:04:24.329023 kernel: audit: type=1327 audit(1696284264.173:1111): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:04:24.329165 kernel: audit: type=1400 audit(1696284264.173:1112): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:24.173000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:24.353974 kernel: audit: type=1300 audit(1696284264.173:1112): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40007f9820 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:04:24.173000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40007f9820 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:04:24.173000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:04:24.409394 kernel: audit: type=1327 audit(1696284264.173:1112): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:04:24.409527 kernel: audit: type=1400 audit(1696284264.173:1113): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:24.173000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:04:24.173000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40007f98a0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:04:24.173000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:04:34.161626 kubelet[2452]: E1002 22:04:34.161578 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:04:45.160558 kubelet[2452]: E1002 22:04:45.160532 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:04:56.160921 kubelet[2452]: E1002 22:04:56.160877 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:05:08.797000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:08.803265 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 22:05:08.803324 kernel: audit: type=1400 audit(1696284308.797:1114): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:08.797000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4000c89e30 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:05:08.856101 kernel: audit: type=1300 audit(1696284308.797:1114): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4000c89e30 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:05:08.797000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:08.881141 kernel: audit: type=1327 audit(1696284308.797:1114): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:08.881296 kernel: audit: type=1400 audit(1696284308.813:1115): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:08.813000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:08.813000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4000c89ec0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:05:08.932075 kernel: audit: type=1300 audit(1696284308.813:1115): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4000c89ec0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:05:08.932231 kernel: audit: type=1327 audit(1696284308.813:1115): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:08.813000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:08.813000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:08.978886 kernel: audit: type=1400 audit(1696284308.813:1116): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:08.978980 kernel: audit: type=1300 audit(1696284308.813:1116): arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400858d420 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:05:08.813000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=400858d420 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:05:08.813000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:09.031159 kernel: audit: type=1327 audit(1696284308.813:1116): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:08.830000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:09.056458 kernel: audit: type=1400 audit(1696284308.830:1117): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:08.830000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=4000ecccc0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:05:08.830000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:09.068000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:09.068000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:09.068000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4000f44f30 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:05:09.068000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4e a1=40087eb620 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:05:09.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:09.068000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:05:09.117000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:09.117000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:09.117000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ddeab0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:05:09.117000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e55f80 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:05:09.117000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:05:09.117000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:05:11.163902 env[1354]: time="2023-10-02T22:05:11.163753182Z" level=info msg="CreateContainer within sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 22:05:11.184891 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3081632368.mount: Deactivated successfully. Oct 2 22:05:11.193117 env[1354]: time="2023-10-02T22:05:11.192993073Z" level=info msg="CreateContainer within sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9\"" Oct 2 22:05:11.193550 env[1354]: time="2023-10-02T22:05:11.193517553Z" level=info msg="StartContainer for \"aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9\"" Oct 2 22:05:11.216436 systemd[1]: Started cri-containerd-aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9.scope. Oct 2 22:05:11.234237 systemd[1]: cri-containerd-aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9.scope: Deactivated successfully. Oct 2 22:05:11.238292 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9-rootfs.mount: Deactivated successfully. Oct 2 22:05:11.268322 env[1354]: time="2023-10-02T22:05:11.268216677Z" level=info msg="shim disconnected" id=aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9 Oct 2 22:05:11.268479 env[1354]: time="2023-10-02T22:05:11.268335757Z" level=warning msg="cleaning up after shim disconnected" id=aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9 namespace=k8s.io Oct 2 22:05:11.268479 env[1354]: time="2023-10-02T22:05:11.268346757Z" level=info msg="cleaning up dead shim" Oct 2 22:05:11.281066 env[1354]: time="2023-10-02T22:05:11.281013145Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:05:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3025 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:05:11Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:05:11.281305 env[1354]: time="2023-10-02T22:05:11.281248944Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 22:05:11.281486 env[1354]: time="2023-10-02T22:05:11.281454944Z" level=error msg="Failed to pipe stdout of container \"aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9\"" error="reading from a closed fifo" Oct 2 22:05:11.281559 env[1354]: time="2023-10-02T22:05:11.281534864Z" level=error msg="Failed to pipe stderr of container \"aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9\"" error="reading from a closed fifo" Oct 2 22:05:11.285325 env[1354]: time="2023-10-02T22:05:11.285285660Z" level=error msg="StartContainer for \"aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:05:11.285966 kubelet[2452]: E1002 22:05:11.285496 2452 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9" Oct 2 22:05:11.285966 kubelet[2452]: E1002 22:05:11.285595 2452 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:05:11.285966 kubelet[2452]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:05:11.285966 kubelet[2452]: rm /hostbin/cilium-mount Oct 2 22:05:11.285966 kubelet[2452]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cmlh8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:05:11.285966 kubelet[2452]: E1002 22:05:11.285629 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:05:11.409223 kubelet[2452]: I1002 22:05:11.409198 2452 scope.go:115] "RemoveContainer" containerID="779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258" Oct 2 22:05:11.409680 kubelet[2452]: I1002 22:05:11.409664 2452 scope.go:115] "RemoveContainer" containerID="779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258" Oct 2 22:05:11.411657 env[1354]: time="2023-10-02T22:05:11.411613773Z" level=info msg="RemoveContainer for \"779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258\"" Oct 2 22:05:11.412478 env[1354]: time="2023-10-02T22:05:11.412444773Z" level=info msg="RemoveContainer for \"779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258\"" Oct 2 22:05:11.412564 env[1354]: time="2023-10-02T22:05:11.412519212Z" level=error msg="RemoveContainer for \"779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258\" failed" error="failed to set removing state for container \"779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258\": container is already in removing state" Oct 2 22:05:11.413208 kubelet[2452]: E1002 22:05:11.413182 2452 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258\": container is already in removing state" containerID="779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258" Oct 2 22:05:11.413343 kubelet[2452]: E1002 22:05:11.413331 2452 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258": container is already in removing state; Skipping pod "cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)" Oct 2 22:05:11.413855 kubelet[2452]: E1002 22:05:11.413841 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:05:11.427885 env[1354]: time="2023-10-02T22:05:11.427784997Z" level=info msg="RemoveContainer for \"779ee21ce2416a25969bef68df850556f8d6b6367e7ee6a4848ee418c2d72258\" returns successfully" Oct 2 22:05:12.170553 kubelet[2452]: E1002 22:05:12.170527 2452 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 22:05:12.208216 kubelet[2452]: E1002 22:05:12.208187 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:14.374022 kubelet[2452]: W1002 22:05:14.373975 2452 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod0cf8447f_4fb8_4561_a50d_aa041f55e60d.slice/cri-containerd-aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9.scope WatchSource:0}: task aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9 not found: not found Oct 2 22:05:17.209148 kubelet[2452]: E1002 22:05:17.209112 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:22.210385 kubelet[2452]: E1002 22:05:22.210359 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:24.161815 kubelet[2452]: E1002 22:05:24.161542 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:05:24.163000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:24.170533 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 22:05:24.170647 kernel: audit: type=1400 audit(1696284324.163:1122): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:24.163000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400135ee80 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:05:24.222272 kernel: audit: type=1300 audit(1696284324.163:1122): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400135ee80 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:05:24.163000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:05:24.246858 kernel: audit: type=1327 audit(1696284324.163:1122): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:05:24.173000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:24.269026 kernel: audit: type=1400 audit(1696284324.173:1123): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:24.269126 kernel: audit: type=1300 audit(1696284324.173:1123): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400135efa0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:05:24.173000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400135efa0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:05:24.173000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:05:24.323506 kernel: audit: type=1327 audit(1696284324.173:1123): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:05:24.323624 kernel: audit: type=1400 audit(1696284324.173:1124): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:24.173000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:24.173000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400135efc0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:05:24.373708 kernel: audit: type=1300 audit(1696284324.173:1124): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400135efc0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:05:24.173000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:05:24.374030 kernel: audit: type=1327 audit(1696284324.173:1124): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:05:24.173000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:24.423177 kernel: audit: type=1400 audit(1696284324.173:1125): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:05:24.173000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400135f000 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:05:24.173000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:05:27.212252 kubelet[2452]: E1002 22:05:27.212225 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:32.213559 kubelet[2452]: E1002 22:05:32.213526 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:37.215217 kubelet[2452]: E1002 22:05:37.215117 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:39.160162 kubelet[2452]: E1002 22:05:39.160123 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:05:42.216063 kubelet[2452]: E1002 22:05:42.216037 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:47.217064 kubelet[2452]: E1002 22:05:47.217037 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:52.160586 kubelet[2452]: E1002 22:05:52.160545 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:05:52.218545 kubelet[2452]: E1002 22:05:52.218487 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:05:57.219424 kubelet[2452]: E1002 22:05:57.219398 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:02.220656 kubelet[2452]: E1002 22:06:02.220621 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:07.159866 kubelet[2452]: E1002 22:06:07.159835 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:06:07.221848 kubelet[2452]: E1002 22:06:07.221813 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:08.802000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:08.807931 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 22:06:08.808051 kernel: audit: type=1400 audit(1696284368.802:1126): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:08.802000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=40097e0570 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:06:08.857472 kernel: audit: type=1300 audit(1696284368.802:1126): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=40097e0570 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:06:08.802000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:06:08.881454 kernel: audit: type=1327 audit(1696284368.802:1126): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:06:08.815000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:08.904384 kernel: audit: type=1400 audit(1696284368.815:1127): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:08.904498 kernel: audit: type=1300 audit(1696284368.815:1127): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400c492320 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:06:08.815000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400c492320 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:06:08.815000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:06:08.955191 kernel: audit: type=1327 audit(1696284368.815:1127): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:06:08.955325 kernel: audit: type=1400 audit(1696284368.815:1128): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:08.815000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:08.815000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=40097e0810 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:06:09.005127 kernel: audit: type=1300 audit(1696284368.815:1128): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=40097e0810 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:06:09.005242 kernel: audit: type=1327 audit(1696284368.815:1128): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:06:08.815000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:06:08.835000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:09.050962 kernel: audit: type=1400 audit(1696284368.835:1129): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:08.835000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4009713380 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:06:08.835000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:06:09.069000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:09.069000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400c492580 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:06:09.069000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:06:09.069000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:09.069000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4009713860 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:06:09.069000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:06:09.117000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:09.117000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400249fdd0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:06:09.117000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:06:09.118000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:09.118000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40023e2d00 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:06:09.118000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:06:10.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.17:22-10.200.12.6:43402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:10.676631 systemd[1]: Started sshd@7-10.200.20.17:22-10.200.12.6:43402.service. Oct 2 22:06:11.111000 audit[3045]: USER_ACCT pid=3045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:11.113079 sshd[3045]: Accepted publickey for core from 10.200.12.6 port 43402 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:06:11.114773 sshd[3045]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:06:11.113000 audit[3045]: CRED_ACQ pid=3045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:11.113000 audit[3045]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe60acf20 a2=3 a3=1 items=0 ppid=1 pid=3045 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:11.113000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:11.119347 systemd-logind[1336]: New session 10 of user core. Oct 2 22:06:11.119880 systemd[1]: Started session-10.scope. Oct 2 22:06:11.122000 audit[3045]: USER_START pid=3045 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:11.125000 audit[3047]: CRED_ACQ pid=3047 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:11.545021 sshd[3045]: pam_unix(sshd:session): session closed for user core Oct 2 22:06:11.544000 audit[3045]: USER_END pid=3045 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:11.545000 audit[3045]: CRED_DISP pid=3045 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:11.548248 systemd-logind[1336]: Session 10 logged out. Waiting for processes to exit. Oct 2 22:06:11.548814 systemd[1]: sshd@7-10.200.20.17:22-10.200.12.6:43402.service: Deactivated successfully. Oct 2 22:06:11.548000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.20.17:22-10.200.12.6:43402 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:11.549537 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 22:06:11.550275 systemd-logind[1336]: Removed session 10. Oct 2 22:06:12.223380 kubelet[2452]: E1002 22:06:12.223358 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:17.224648 kubelet[2452]: E1002 22:06:17.224620 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:19.160749 kubelet[2452]: E1002 22:06:19.160712 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:06:21.639497 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 22:06:21.639637 kernel: audit: type=1130 audit(1696284381.612:1143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.17:22-10.200.12.6:57162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:21.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.17:22-10.200.12.6:57162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:21.612983 systemd[1]: Started sshd@8-10.200.20.17:22-10.200.12.6:57162.service. Oct 2 22:06:22.011000 audit[3062]: USER_ACCT pid=3062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:22.013852 sshd[3062]: Accepted publickey for core from 10.200.12.6 port 57162 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:06:22.015077 sshd[3062]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:06:22.011000 audit[3062]: CRED_ACQ pid=3062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:22.062244 kernel: audit: type=1101 audit(1696284382.011:1144): pid=3062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:22.062335 kernel: audit: type=1103 audit(1696284382.011:1145): pid=3062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:22.079234 kernel: audit: type=1006 audit(1696284382.011:1146): pid=3062 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 22:06:22.011000 audit[3062]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffedf03f60 a2=3 a3=1 items=0 ppid=1 pid=3062 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:22.104499 kernel: audit: type=1300 audit(1696284382.011:1146): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffedf03f60 a2=3 a3=1 items=0 ppid=1 pid=3062 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:22.011000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:22.107783 systemd[1]: Started session-11.scope. Oct 2 22:06:22.115091 kernel: audit: type=1327 audit(1696284382.011:1146): proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:22.116533 systemd-logind[1336]: New session 11 of user core. Oct 2 22:06:22.121000 audit[3062]: USER_START pid=3062 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:22.121000 audit[3067]: CRED_ACQ pid=3067 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:22.170742 kernel: audit: type=1105 audit(1696284382.121:1147): pid=3062 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:22.170820 kernel: audit: type=1103 audit(1696284382.121:1148): pid=3067 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:22.225674 kubelet[2452]: E1002 22:06:22.225625 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:22.434137 sshd[3062]: pam_unix(sshd:session): session closed for user core Oct 2 22:06:22.434000 audit[3062]: USER_END pid=3062 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:22.438595 systemd-logind[1336]: Session 11 logged out. Waiting for processes to exit. Oct 2 22:06:22.439693 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 22:06:22.440736 systemd-logind[1336]: Removed session 11. Oct 2 22:06:22.441286 systemd[1]: sshd@8-10.200.20.17:22-10.200.12.6:57162.service: Deactivated successfully. Oct 2 22:06:22.434000 audit[3062]: CRED_DISP pid=3062 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:22.484029 kernel: audit: type=1106 audit(1696284382.434:1149): pid=3062 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:22.484169 kernel: audit: type=1104 audit(1696284382.434:1150): pid=3062 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:22.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.20.17:22-10.200.12.6:57162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:24.164000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:24.164000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400034d9c0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:06:24.164000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:06:24.174000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:24.174000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:24.174000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010ddfc0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:06:24.174000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:06:24.174000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400034dc80 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:06:24.174000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:06:24.174000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:06:24.174000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010ddfe0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:06:24.174000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:06:27.227050 kubelet[2452]: E1002 22:06:27.227024 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:30.160630 kubelet[2452]: E1002 22:06:30.160597 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:06:32.228237 kubelet[2452]: E1002 22:06:32.228213 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:32.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.17:22-10.200.12.6:32988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:32.502257 systemd[1]: Started sshd@9-10.200.20.17:22-10.200.12.6:32988.service. Oct 2 22:06:32.507952 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 22:06:32.508027 kernel: audit: type=1130 audit(1696284392.501:1156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.17:22-10.200.12.6:32988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:32.900000 audit[3081]: USER_ACCT pid=3081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:32.901383 sshd[3081]: Accepted publickey for core from 10.200.12.6 port 32988 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:06:32.925779 sshd[3081]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:06:32.926062 kernel: audit: type=1101 audit(1696284392.900:1157): pid=3081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:32.926108 kernel: audit: type=1103 audit(1696284392.924:1158): pid=3081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:32.924000 audit[3081]: CRED_ACQ pid=3081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:32.962261 kernel: audit: type=1006 audit(1696284392.924:1159): pid=3081 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 22:06:32.924000 audit[3081]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0658670 a2=3 a3=1 items=0 ppid=1 pid=3081 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:32.986089 kernel: audit: type=1300 audit(1696284392.924:1159): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0658670 a2=3 a3=1 items=0 ppid=1 pid=3081 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:32.924000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:32.990360 systemd[1]: Started session-12.scope. Oct 2 22:06:32.990989 systemd-logind[1336]: New session 12 of user core. Oct 2 22:06:32.995364 kernel: audit: type=1327 audit(1696284392.924:1159): proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:32.998627 kernel: audit: type=1105 audit(1696284392.995:1160): pid=3081 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:32.995000 audit[3081]: USER_START pid=3081 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:32.998000 audit[3083]: CRED_ACQ pid=3083 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:33.046631 kernel: audit: type=1103 audit(1696284392.998:1161): pid=3083 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:33.302147 sshd[3081]: pam_unix(sshd:session): session closed for user core Oct 2 22:06:33.302000 audit[3081]: USER_END pid=3081 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:33.305459 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 22:06:33.306243 systemd[1]: sshd@9-10.200.20.17:22-10.200.12.6:32988.service: Deactivated successfully. Oct 2 22:06:33.303000 audit[3081]: CRED_DISP pid=3081 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:33.350927 kernel: audit: type=1106 audit(1696284393.302:1162): pid=3081 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:33.351046 kernel: audit: type=1104 audit(1696284393.303:1163): pid=3081 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:33.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.20.17:22-10.200.12.6:32988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:33.351194 systemd-logind[1336]: Session 12 logged out. Waiting for processes to exit. Oct 2 22:06:33.351879 systemd-logind[1336]: Removed session 12. Oct 2 22:06:37.229561 kubelet[2452]: E1002 22:06:37.229526 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:42.230266 kubelet[2452]: E1002 22:06:42.230240 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:43.372000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.17:22-10.200.12.6:37684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:43.373039 systemd[1]: Started sshd@10-10.200.20.17:22-10.200.12.6:37684.service. Oct 2 22:06:43.378720 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:06:43.378834 kernel: audit: type=1130 audit(1696284403.372:1165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.17:22-10.200.12.6:37684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:43.778000 audit[3097]: USER_ACCT pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:43.780247 sshd[3097]: Accepted publickey for core from 10.200.12.6 port 37684 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:06:43.803979 kernel: audit: type=1101 audit(1696284403.778:1166): pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:43.802000 audit[3097]: CRED_ACQ pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:43.804286 sshd[3097]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:06:43.841231 kernel: audit: type=1103 audit(1696284403.802:1167): pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:43.841347 kernel: audit: type=1006 audit(1696284403.802:1168): pid=3097 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 22:06:43.802000 audit[3097]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf5d40b0 a2=3 a3=1 items=0 ppid=1 pid=3097 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:43.865193 kernel: audit: type=1300 audit(1696284403.802:1168): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf5d40b0 a2=3 a3=1 items=0 ppid=1 pid=3097 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:43.802000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:43.868080 systemd[1]: Started session-13.scope. Oct 2 22:06:43.874054 kernel: audit: type=1327 audit(1696284403.802:1168): proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:43.874199 systemd-logind[1336]: New session 13 of user core. Oct 2 22:06:43.877000 audit[3097]: USER_START pid=3097 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:43.880000 audit[3099]: CRED_ACQ pid=3099 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:43.927342 kernel: audit: type=1105 audit(1696284403.877:1169): pid=3097 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:43.927433 kernel: audit: type=1103 audit(1696284403.880:1170): pid=3099 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:44.163111 env[1354]: time="2023-10-02T22:06:44.163061073Z" level=info msg="CreateContainer within sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 22:06:44.189665 env[1354]: time="2023-10-02T22:06:44.189546203Z" level=info msg="CreateContainer within sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f\"" Oct 2 22:06:44.190050 sshd[3097]: pam_unix(sshd:session): session closed for user core Oct 2 22:06:44.190633 env[1354]: time="2023-10-02T22:06:44.190550244Z" level=info msg="StartContainer for \"35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f\"" Oct 2 22:06:44.190000 audit[3097]: USER_END pid=3097 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:44.193604 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 22:06:44.194328 systemd[1]: sshd@10-10.200.20.17:22-10.200.12.6:37684.service: Deactivated successfully. Oct 2 22:06:44.221158 systemd-logind[1336]: Session 13 logged out. Waiting for processes to exit. Oct 2 22:06:44.222040 systemd-logind[1336]: Removed session 13. Oct 2 22:06:44.190000 audit[3097]: CRED_DISP pid=3097 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:44.247936 kernel: audit: type=1106 audit(1696284404.190:1171): pid=3097 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:44.248128 kernel: audit: type=1104 audit(1696284404.190:1172): pid=3097 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:44.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.20.17:22-10.200.12.6:37684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:44.254269 systemd[1]: Started cri-containerd-35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f.scope. Oct 2 22:06:44.266817 systemd[1]: cri-containerd-35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f.scope: Deactivated successfully. Oct 2 22:06:44.282267 env[1354]: time="2023-10-02T22:06:44.282215920Z" level=info msg="shim disconnected" id=35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f Oct 2 22:06:44.282487 env[1354]: time="2023-10-02T22:06:44.282470360Z" level=warning msg="cleaning up after shim disconnected" id=35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f namespace=k8s.io Oct 2 22:06:44.282547 env[1354]: time="2023-10-02T22:06:44.282535400Z" level=info msg="cleaning up dead shim" Oct 2 22:06:44.294605 env[1354]: time="2023-10-02T22:06:44.294560964Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:06:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3132 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:06:44Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:06:44.295024 env[1354]: time="2023-10-02T22:06:44.294958485Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 22:06:44.295505 env[1354]: time="2023-10-02T22:06:44.295274885Z" level=error msg="Failed to pipe stdout of container \"35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f\"" error="reading from a closed fifo" Oct 2 22:06:44.295607 env[1354]: time="2023-10-02T22:06:44.295308085Z" level=error msg="Failed to pipe stderr of container \"35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f\"" error="reading from a closed fifo" Oct 2 22:06:44.298802 env[1354]: time="2023-10-02T22:06:44.298765686Z" level=error msg="StartContainer for \"35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:06:44.299140 kubelet[2452]: E1002 22:06:44.299111 2452 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f" Oct 2 22:06:44.299405 kubelet[2452]: E1002 22:06:44.299233 2452 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:06:44.299405 kubelet[2452]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:06:44.299405 kubelet[2452]: rm /hostbin/cilium-mount Oct 2 22:06:44.299405 kubelet[2452]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-cmlh8,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:06:44.299405 kubelet[2452]: E1002 22:06:44.299280 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:06:44.564902 kubelet[2452]: I1002 22:06:44.564869 2452 scope.go:115] "RemoveContainer" containerID="aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9" Oct 2 22:06:44.565310 kubelet[2452]: I1002 22:06:44.565286 2452 scope.go:115] "RemoveContainer" containerID="aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9" Oct 2 22:06:44.569067 env[1354]: time="2023-10-02T22:06:44.569028992Z" level=info msg="RemoveContainer for \"aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9\"" Oct 2 22:06:44.570764 env[1354]: time="2023-10-02T22:06:44.570737952Z" level=info msg="RemoveContainer for \"aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9\"" Oct 2 22:06:44.570978 env[1354]: time="2023-10-02T22:06:44.570913152Z" level=error msg="RemoveContainer for \"aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9\" failed" error="failed to set removing state for container \"aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9\": container is already in removing state" Oct 2 22:06:44.571641 kubelet[2452]: E1002 22:06:44.571159 2452 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9\": container is already in removing state" containerID="aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9" Oct 2 22:06:44.571641 kubelet[2452]: E1002 22:06:44.571191 2452 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9": container is already in removing state; Skipping pod "cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)" Oct 2 22:06:44.571641 kubelet[2452]: E1002 22:06:44.571473 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:06:44.577213 env[1354]: time="2023-10-02T22:06:44.577180835Z" level=info msg="RemoveContainer for \"aaec60faa256372694cab6003ae48f9fb4da474794d732f3979774e3009fc5b9\" returns successfully" Oct 2 22:06:45.179798 systemd[1]: run-containerd-runc-k8s.io-35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f-runc.TbaNSm.mount: Deactivated successfully. Oct 2 22:06:45.179901 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f-rootfs.mount: Deactivated successfully. Oct 2 22:06:47.231744 kubelet[2452]: E1002 22:06:47.231720 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:47.386404 kubelet[2452]: W1002 22:06:47.386359 2452 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod0cf8447f_4fb8_4561_a50d_aa041f55e60d.slice/cri-containerd-35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f.scope WatchSource:0}: task 35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f not found: not found Oct 2 22:06:52.233693 kubelet[2452]: E1002 22:06:52.233668 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:06:54.255000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.17:22-10.200.12.6:44758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:54.256699 systemd[1]: Started sshd@11-10.200.20.17:22-10.200.12.6:44758.service. Oct 2 22:06:54.261688 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:06:54.261775 kernel: audit: type=1130 audit(1696284414.255:1174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.17:22-10.200.12.6:44758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:54.655000 audit[3146]: USER_ACCT pid=3146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:54.658720 sshd[3146]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:06:54.661164 sshd[3146]: Accepted publickey for core from 10.200.12.6 port 44758 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:06:54.657000 audit[3146]: CRED_ACQ pid=3146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:54.704280 kernel: audit: type=1101 audit(1696284414.655:1175): pid=3146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:54.704406 kernel: audit: type=1103 audit(1696284414.657:1176): pid=3146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:54.704440 kernel: audit: type=1006 audit(1696284414.657:1177): pid=3146 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 22:06:54.657000 audit[3146]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdbcdd4e0 a2=3 a3=1 items=0 ppid=1 pid=3146 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:54.741312 kernel: audit: type=1300 audit(1696284414.657:1177): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdbcdd4e0 a2=3 a3=1 items=0 ppid=1 pid=3146 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:06:54.657000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:54.744175 systemd[1]: Started session-14.scope. Oct 2 22:06:54.749769 kernel: audit: type=1327 audit(1696284414.657:1177): proctitle=737368643A20636F7265205B707269765D Oct 2 22:06:54.749810 systemd-logind[1336]: New session 14 of user core. Oct 2 22:06:54.753000 audit[3146]: USER_START pid=3146 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:54.756000 audit[3148]: CRED_ACQ pid=3148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:54.805045 kernel: audit: type=1105 audit(1696284414.753:1178): pid=3146 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:54.805125 kernel: audit: type=1103 audit(1696284414.756:1179): pid=3148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:55.062217 sshd[3146]: pam_unix(sshd:session): session closed for user core Oct 2 22:06:55.062000 audit[3146]: USER_END pid=3146 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:55.068125 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 22:06:55.068893 systemd[1]: sshd@11-10.200.20.17:22-10.200.12.6:44758.service: Deactivated successfully. Oct 2 22:06:55.064000 audit[3146]: CRED_DISP pid=3146 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:55.122205 kernel: audit: type=1106 audit(1696284415.062:1180): pid=3146 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:55.122389 kernel: audit: type=1104 audit(1696284415.064:1181): pid=3146 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:06:55.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.20.17:22-10.200.12.6:44758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:06:55.122503 systemd-logind[1336]: Session 14 logged out. Waiting for processes to exit. Oct 2 22:06:55.123228 systemd-logind[1336]: Removed session 14. Oct 2 22:06:57.160274 kubelet[2452]: E1002 22:06:57.160246 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:06:57.234969 kubelet[2452]: E1002 22:06:57.234929 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:02.236209 kubelet[2452]: E1002 22:07:02.236162 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:05.131293 systemd[1]: Started sshd@12-10.200.20.17:22-10.200.12.6:52916.service. Oct 2 22:07:05.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.17:22-10.200.12.6:52916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:05.137282 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:07:05.137359 kernel: audit: type=1130 audit(1696284425.130:1183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.17:22-10.200.12.6:52916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:05.536000 audit[3160]: USER_ACCT pid=3160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:05.538180 sshd[3160]: Accepted publickey for core from 10.200.12.6 port 52916 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:07:05.562980 kernel: audit: type=1101 audit(1696284425.536:1184): pid=3160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:05.563079 kernel: audit: type=1103 audit(1696284425.561:1185): pid=3160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:05.561000 audit[3160]: CRED_ACQ pid=3160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:05.563476 sshd[3160]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:07:05.602173 kernel: audit: type=1006 audit(1696284425.561:1186): pid=3160 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 22:07:05.603193 kernel: audit: type=1300 audit(1696284425.561:1186): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1491510 a2=3 a3=1 items=0 ppid=1 pid=3160 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:05.561000 audit[3160]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd1491510 a2=3 a3=1 items=0 ppid=1 pid=3160 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:05.561000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:05.635915 kernel: audit: type=1327 audit(1696284425.561:1186): proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:05.636986 systemd-logind[1336]: New session 15 of user core. Oct 2 22:07:05.637226 systemd[1]: Started session-15.scope. Oct 2 22:07:05.640000 audit[3160]: USER_START pid=3160 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:05.643000 audit[3162]: CRED_ACQ pid=3162 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:05.688641 kernel: audit: type=1105 audit(1696284425.640:1187): pid=3160 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:05.688796 kernel: audit: type=1103 audit(1696284425.643:1188): pid=3162 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:05.945099 sshd[3160]: pam_unix(sshd:session): session closed for user core Oct 2 22:07:05.945000 audit[3160]: USER_END pid=3160 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:05.948913 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 22:07:05.949642 systemd[1]: sshd@12-10.200.20.17:22-10.200.12.6:52916.service: Deactivated successfully. Oct 2 22:07:05.973999 kernel: audit: type=1106 audit(1696284425.945:1189): pid=3160 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:05.974102 kernel: audit: type=1104 audit(1696284425.945:1190): pid=3160 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:05.945000 audit[3160]: CRED_DISP pid=3160 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:05.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.20.17:22-10.200.12.6:52916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:05.997389 systemd-logind[1336]: Session 15 logged out. Waiting for processes to exit. Oct 2 22:07:05.998160 systemd-logind[1336]: Removed session 15. Oct 2 22:07:07.237391 kubelet[2452]: E1002 22:07:07.237366 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:08.804000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:08.804000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4008815170 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:07:08.804000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:07:08.815000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:08.815000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:08.815000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40088151a0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:07:08.815000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:07:08.815000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4009d1f9e0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:07:08.815000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:07:08.836000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:08.836000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4008815200 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:07:08.836000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:07:09.071000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:09.071000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4008815620 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:07:09.071000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:07:09.071000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:09.071000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4009d1ff80 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:07:09.071000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:07:09.118000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:09.118000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40014b9dd0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:07:09.118000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:09.119000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:09.119000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40014c8d40 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:07:09.119000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:09.160055 kubelet[2452]: E1002 22:07:09.160027 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:07:12.238691 kubelet[2452]: E1002 22:07:12.238662 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:16.013098 systemd[1]: Started sshd@13-10.200.20.17:22-10.200.12.6:35990.service. Oct 2 22:07:16.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.17:22-10.200.12.6:35990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:16.019840 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 22:07:16.019921 kernel: audit: type=1130 audit(1696284436.012:1200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.17:22-10.200.12.6:35990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:16.416000 audit[3175]: USER_ACCT pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:16.417650 sshd[3175]: Accepted publickey for core from 10.200.12.6 port 35990 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:07:16.441972 kernel: audit: type=1101 audit(1696284436.416:1201): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:16.442000 audit[3175]: CRED_ACQ pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:16.443632 sshd[3175]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:07:16.479498 kernel: audit: type=1103 audit(1696284436.442:1202): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:16.479615 kernel: audit: type=1006 audit(1696284436.442:1203): pid=3175 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 22:07:16.479644 kernel: audit: type=1300 audit(1696284436.442:1203): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffffedfaa0 a2=3 a3=1 items=0 ppid=1 pid=3175 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:16.442000 audit[3175]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffffedfaa0 a2=3 a3=1 items=0 ppid=1 pid=3175 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:16.442000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:16.508819 systemd[1]: Started session-16.scope. Oct 2 22:07:16.509959 systemd-logind[1336]: New session 16 of user core. Oct 2 22:07:16.514323 kernel: audit: type=1327 audit(1696284436.442:1203): proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:16.514000 audit[3175]: USER_START pid=3175 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:16.517000 audit[3177]: CRED_ACQ pid=3177 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:16.543075 kernel: audit: type=1105 audit(1696284436.514:1204): pid=3175 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:16.565970 kernel: audit: type=1103 audit(1696284436.517:1205): pid=3177 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:16.816146 sshd[3175]: pam_unix(sshd:session): session closed for user core Oct 2 22:07:16.816000 audit[3175]: USER_END pid=3175 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:16.819574 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 22:07:16.820251 systemd[1]: sshd@13-10.200.20.17:22-10.200.12.6:35990.service: Deactivated successfully. Oct 2 22:07:16.817000 audit[3175]: CRED_DISP pid=3175 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:16.865054 kernel: audit: type=1106 audit(1696284436.816:1206): pid=3175 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:16.865177 kernel: audit: type=1104 audit(1696284436.817:1207): pid=3175 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:16.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.20.17:22-10.200.12.6:35990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:16.865915 systemd-logind[1336]: Session 16 logged out. Waiting for processes to exit. Oct 2 22:07:16.866726 systemd-logind[1336]: Removed session 16. Oct 2 22:07:17.240160 kubelet[2452]: E1002 22:07:17.240051 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:22.240921 kubelet[2452]: E1002 22:07:22.240887 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:23.160241 kubelet[2452]: E1002 22:07:23.160211 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:07:24.165000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:24.170783 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:07:24.170890 kernel: audit: type=1400 audit(1696284444.165:1209): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:24.165000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b4120 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:07:24.223160 kernel: audit: type=1300 audit(1696284444.165:1209): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b4120 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:07:24.165000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:24.248089 kernel: audit: type=1327 audit(1696284444.165:1209): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:24.248220 kernel: audit: type=1400 audit(1696284444.170:1210): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:24.170000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:24.170000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b4140 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:07:24.301487 kernel: audit: type=1300 audit(1696284444.170:1210): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b4140 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:07:24.170000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:24.327407 kernel: audit: type=1327 audit(1696284444.170:1210): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:24.170000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:24.350695 kernel: audit: type=1400 audit(1696284444.170:1211): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:24.350837 kernel: audit: type=1300 audit(1696284444.170:1211): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b4160 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:07:24.170000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b4160 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:07:24.170000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:24.405169 kernel: audit: type=1327 audit(1696284444.170:1211): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:24.405284 kernel: audit: type=1400 audit(1696284444.170:1212): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:24.170000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:07:24.170000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400265b680 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:07:24.170000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:07:26.884261 systemd[1]: Started sshd@14-10.200.20.17:22-10.200.12.6:45642.service. Oct 2 22:07:26.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.17:22-10.200.12.6:45642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:27.242492 kubelet[2452]: E1002 22:07:27.242191 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:27.283000 audit[3188]: USER_ACCT pid=3188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:27.284753 sshd[3188]: Accepted publickey for core from 10.200.12.6 port 45642 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:07:27.285000 audit[3188]: CRED_ACQ pid=3188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:27.285000 audit[3188]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb5045f0 a2=3 a3=1 items=0 ppid=1 pid=3188 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:27.285000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:27.286341 sshd[3188]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:07:27.290644 systemd[1]: Started session-17.scope. Oct 2 22:07:27.291126 systemd-logind[1336]: New session 17 of user core. Oct 2 22:07:27.293000 audit[3188]: USER_START pid=3188 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:27.296000 audit[3190]: CRED_ACQ pid=3190 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:27.641899 sshd[3188]: pam_unix(sshd:session): session closed for user core Oct 2 22:07:27.641000 audit[3188]: USER_END pid=3188 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:27.642000 audit[3188]: CRED_DISP pid=3188 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:27.644978 systemd-logind[1336]: Session 17 logged out. Waiting for processes to exit. Oct 2 22:07:27.645530 systemd[1]: sshd@14-10.200.20.17:22-10.200.12.6:45642.service: Deactivated successfully. Oct 2 22:07:27.644000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.20.17:22-10.200.12.6:45642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:27.646248 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 22:07:27.646926 systemd-logind[1336]: Removed session 17. Oct 2 22:07:32.243799 kubelet[2452]: E1002 22:07:32.243772 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:35.160907 kubelet[2452]: E1002 22:07:35.160869 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:07:37.245593 kubelet[2452]: E1002 22:07:37.245558 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:37.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.17:22-10.200.12.6:34430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:37.708746 systemd[1]: Started sshd@15-10.200.20.17:22-10.200.12.6:34430.service. Oct 2 22:07:37.714045 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 22:07:37.714130 kernel: audit: type=1130 audit(1696284457.707:1222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.17:22-10.200.12.6:34430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:38.107000 audit[3202]: USER_ACCT pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:38.108514 sshd[3202]: Accepted publickey for core from 10.200.12.6 port 34430 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:07:38.137564 kernel: audit: type=1101 audit(1696284458.107:1223): pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:38.137653 kernel: audit: type=1103 audit(1696284458.135:1224): pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:38.135000 audit[3202]: CRED_ACQ pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:38.136400 sshd[3202]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:07:38.162306 systemd-logind[1336]: New session 18 of user core. Oct 2 22:07:38.162800 systemd[1]: Started session-18.scope. Oct 2 22:07:38.180039 kernel: audit: type=1006 audit(1696284458.135:1225): pid=3202 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 22:07:38.135000 audit[3202]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4dccad0 a2=3 a3=1 items=0 ppid=1 pid=3202 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:38.206271 kernel: audit: type=1300 audit(1696284458.135:1225): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4dccad0 a2=3 a3=1 items=0 ppid=1 pid=3202 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:38.135000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:38.214494 kernel: audit: type=1327 audit(1696284458.135:1225): proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:38.215000 audit[3202]: USER_START pid=3202 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:38.244699 kernel: audit: type=1105 audit(1696284458.215:1226): pid=3202 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:38.244813 kernel: audit: type=1103 audit(1696284458.243:1227): pid=3204 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:38.243000 audit[3204]: CRED_ACQ pid=3204 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:38.546144 sshd[3202]: pam_unix(sshd:session): session closed for user core Oct 2 22:07:38.546000 audit[3202]: USER_END pid=3202 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:38.546000 audit[3202]: CRED_DISP pid=3202 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:38.574012 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 22:07:38.574940 systemd[1]: sshd@15-10.200.20.17:22-10.200.12.6:34430.service: Deactivated successfully. Oct 2 22:07:38.594516 kernel: audit: type=1106 audit(1696284458.546:1228): pid=3202 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:38.594635 kernel: audit: type=1104 audit(1696284458.546:1229): pid=3202 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:38.574000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.20.17:22-10.200.12.6:34430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:38.595083 systemd-logind[1336]: Session 18 logged out. Waiting for processes to exit. Oct 2 22:07:38.595683 systemd-logind[1336]: Removed session 18. Oct 2 22:07:42.246391 kubelet[2452]: E1002 22:07:42.246352 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:47.248181 kubelet[2452]: E1002 22:07:47.248156 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:48.162046 kubelet[2452]: E1002 22:07:48.162019 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:07:48.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.17:22-10.200.12.6:46716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:48.613856 systemd[1]: Started sshd@16-10.200.20.17:22-10.200.12.6:46716.service. Oct 2 22:07:48.619366 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:07:48.619466 kernel: audit: type=1130 audit(1696284468.613:1231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.17:22-10.200.12.6:46716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:49.013000 audit[3216]: USER_ACCT pid=3216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:49.014597 sshd[3216]: Accepted publickey for core from 10.200.12.6 port 46716 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:07:49.039982 kernel: audit: type=1101 audit(1696284469.013:1232): pid=3216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:49.039000 audit[3216]: CRED_ACQ pid=3216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:49.045170 sshd[3216]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:07:49.083737 kernel: audit: type=1103 audit(1696284469.039:1233): pid=3216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:49.083867 kernel: audit: type=1006 audit(1696284469.039:1234): pid=3216 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 22:07:49.039000 audit[3216]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde4064d0 a2=3 a3=1 items=0 ppid=1 pid=3216 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:49.107681 kernel: audit: type=1300 audit(1696284469.039:1234): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde4064d0 a2=3 a3=1 items=0 ppid=1 pid=3216 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:49.039000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:49.115925 kernel: audit: type=1327 audit(1696284469.039:1234): proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:49.119064 systemd[1]: Started session-19.scope. Oct 2 22:07:49.119354 systemd-logind[1336]: New session 19 of user core. Oct 2 22:07:49.122000 audit[3216]: USER_START pid=3216 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:49.122000 audit[3218]: CRED_ACQ pid=3218 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:49.172982 kernel: audit: type=1105 audit(1696284469.122:1235): pid=3216 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:49.173100 kernel: audit: type=1103 audit(1696284469.122:1236): pid=3218 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:49.425835 sshd[3216]: pam_unix(sshd:session): session closed for user core Oct 2 22:07:49.426000 audit[3216]: USER_END pid=3216 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:49.429617 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 22:07:49.430343 systemd[1]: sshd@16-10.200.20.17:22-10.200.12.6:46716.service: Deactivated successfully. Oct 2 22:07:49.454218 kernel: audit: type=1106 audit(1696284469.426:1237): pid=3216 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:49.454305 kernel: audit: type=1104 audit(1696284469.426:1238): pid=3216 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:49.426000 audit[3216]: CRED_DISP pid=3216 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:49.454729 systemd-logind[1336]: Session 19 logged out. Waiting for processes to exit. Oct 2 22:07:49.455520 systemd-logind[1336]: Removed session 19. Oct 2 22:07:49.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.20.17:22-10.200.12.6:46716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:49.492586 systemd[1]: Started sshd@17-10.200.20.17:22-10.200.12.6:46722.service. Oct 2 22:07:49.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.17:22-10.200.12.6:46722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:49.890000 audit[3228]: USER_ACCT pid=3228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:49.891206 sshd[3228]: Accepted publickey for core from 10.200.12.6 port 46722 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:07:49.891000 audit[3228]: CRED_ACQ pid=3228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:49.891000 audit[3228]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3fd8b10 a2=3 a3=1 items=0 ppid=1 pid=3228 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:49.891000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:49.893057 sshd[3228]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:07:49.896887 systemd-logind[1336]: New session 20 of user core. Oct 2 22:07:49.897330 systemd[1]: Started session-20.scope. Oct 2 22:07:49.900000 audit[3228]: USER_START pid=3228 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:49.903000 audit[3230]: CRED_ACQ pid=3230 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:50.835269 sshd[3228]: pam_unix(sshd:session): session closed for user core Oct 2 22:07:50.835000 audit[3228]: USER_END pid=3228 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:50.835000 audit[3228]: CRED_DISP pid=3228 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:50.838291 systemd[1]: sshd@17-10.200.20.17:22-10.200.12.6:46722.service: Deactivated successfully. Oct 2 22:07:50.837000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.20.17:22-10.200.12.6:46722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:50.839037 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 22:07:50.839540 systemd-logind[1336]: Session 20 logged out. Waiting for processes to exit. Oct 2 22:07:50.840473 systemd-logind[1336]: Removed session 20. Oct 2 22:07:50.902693 systemd[1]: Started sshd@18-10.200.20.17:22-10.200.12.6:46730.service. Oct 2 22:07:50.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.17:22-10.200.12.6:46730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:51.301000 audit[3239]: USER_ACCT pid=3239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:51.302892 sshd[3239]: Accepted publickey for core from 10.200.12.6 port 46730 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:07:51.303000 audit[3239]: CRED_ACQ pid=3239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:51.303000 audit[3239]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4304f20 a2=3 a3=1 items=0 ppid=1 pid=3239 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:07:51.303000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:07:51.304730 sshd[3239]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:07:51.308909 systemd[1]: Started session-21.scope. Oct 2 22:07:51.309987 systemd-logind[1336]: New session 21 of user core. Oct 2 22:07:51.313000 audit[3239]: USER_START pid=3239 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:51.315000 audit[3241]: CRED_ACQ pid=3241 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:51.661934 sshd[3239]: pam_unix(sshd:session): session closed for user core Oct 2 22:07:51.662000 audit[3239]: USER_END pid=3239 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:51.662000 audit[3239]: CRED_DISP pid=3239 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:07:51.665583 systemd[1]: sshd@18-10.200.20.17:22-10.200.12.6:46730.service: Deactivated successfully. Oct 2 22:07:51.664000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.20.17:22-10.200.12.6:46730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:07:51.666320 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 22:07:51.666899 systemd-logind[1336]: Session 21 logged out. Waiting for processes to exit. Oct 2 22:07:51.667625 systemd-logind[1336]: Removed session 21. Oct 2 22:07:52.249827 kubelet[2452]: E1002 22:07:52.249800 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:07:57.251390 kubelet[2452]: E1002 22:07:57.251365 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:01.160564 kubelet[2452]: E1002 22:08:01.160525 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:08:01.728905 systemd[1]: Started sshd@19-10.200.20.17:22-10.200.12.6:58744.service. Oct 2 22:08:01.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.17:22-10.200.12.6:58744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:01.734306 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 22:08:01.734370 kernel: audit: type=1130 audit(1696284481.728:1258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.17:22-10.200.12.6:58744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:02.128000 audit[3253]: USER_ACCT pid=3253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:02.129493 sshd[3253]: Accepted publickey for core from 10.200.12.6 port 58744 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:08:02.131577 sshd[3253]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:08:02.130000 audit[3253]: CRED_ACQ pid=3253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:02.177576 kernel: audit: type=1101 audit(1696284482.128:1259): pid=3253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:02.177695 kernel: audit: type=1103 audit(1696284482.130:1260): pid=3253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:02.192656 kernel: audit: type=1006 audit(1696284482.130:1261): pid=3253 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 22:08:02.130000 audit[3253]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd44b4ba0 a2=3 a3=1 items=0 ppid=1 pid=3253 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:02.217878 kernel: audit: type=1300 audit(1696284482.130:1261): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd44b4ba0 a2=3 a3=1 items=0 ppid=1 pid=3253 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:02.130000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:02.227549 kernel: audit: type=1327 audit(1696284482.130:1261): proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:02.228774 systemd[1]: Started session-22.scope. Oct 2 22:08:02.229474 systemd-logind[1336]: New session 22 of user core. Oct 2 22:08:02.233000 audit[3253]: USER_START pid=3253 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:02.261383 kubelet[2452]: E1002 22:08:02.261358 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:02.234000 audit[3255]: CRED_ACQ pid=3255 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:02.284955 kernel: audit: type=1105 audit(1696284482.233:1262): pid=3253 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:02.285146 kernel: audit: type=1103 audit(1696284482.234:1263): pid=3255 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:02.560911 sshd[3253]: pam_unix(sshd:session): session closed for user core Oct 2 22:08:02.560000 audit[3253]: USER_END pid=3253 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:02.564281 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 22:08:02.565007 systemd[1]: sshd@19-10.200.20.17:22-10.200.12.6:58744.service: Deactivated successfully. Oct 2 22:08:02.560000 audit[3253]: CRED_DISP pid=3253 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:02.608625 kernel: audit: type=1106 audit(1696284482.560:1264): pid=3253 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:02.608711 kernel: audit: type=1104 audit(1696284482.560:1265): pid=3253 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:02.560000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.20.17:22-10.200.12.6:58744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:02.609065 systemd-logind[1336]: Session 22 logged out. Waiting for processes to exit. Oct 2 22:08:02.609805 systemd-logind[1336]: Removed session 22. Oct 2 22:08:07.261999 kubelet[2452]: E1002 22:08:07.261974 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:08.804000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:08.810537 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:08:08.810652 kernel: audit: type=1400 audit(1696284488.804:1267): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:08.804000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4010fe1da0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:08:08.863495 kernel: audit: type=1300 audit(1696284488.804:1267): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4010fe1da0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:08:08.804000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:08.888507 kernel: audit: type=1327 audit(1696284488.804:1267): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:08.888632 kernel: audit: type=1400 audit(1696284488.815:1268): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:08.815000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:08.815000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40110bc840 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:08:08.937033 kernel: audit: type=1300 audit(1696284488.815:1268): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40110bc840 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:08:08.815000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:08.961073 kernel: audit: type=1327 audit(1696284488.815:1268): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:08.961211 kernel: audit: type=1400 audit(1696284488.816:1269): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:08.816000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:08.816000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4010fe1e00 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:08:09.010686 kernel: audit: type=1300 audit(1696284488.816:1269): arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4010fe1e00 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:08:08.816000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:09.034490 kernel: audit: type=1327 audit(1696284488.816:1269): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:09.034616 kernel: audit: type=1400 audit(1696284488.837:1270): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:08.837000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:08.837000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4011023b30 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:08:08.837000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:09.071000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:09.071000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40110a3a80 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:08:09.071000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:09.071000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:09.071000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4011146540 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:08:09.071000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:08:09.119000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:09.119000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011d8030 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:08:09.119000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:08:09.119000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:09.119000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=400248a8c0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:08:09.119000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:08:12.178273 kubelet[2452]: W1002 22:08:12.178242 2452 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 22:08:12.264239 kubelet[2452]: E1002 22:08:12.264208 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:12.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.17:22-10.200.12.6:51832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:12.629244 systemd[1]: Started sshd@20-10.200.20.17:22-10.200.12.6:51832.service. Oct 2 22:08:13.033000 audit[3268]: USER_ACCT pid=3268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:13.034491 sshd[3268]: Accepted publickey for core from 10.200.12.6 port 51832 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:08:13.035000 audit[3268]: CRED_ACQ pid=3268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:13.035000 audit[3268]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd89bb7d0 a2=3 a3=1 items=0 ppid=1 pid=3268 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:13.035000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:13.036707 sshd[3268]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:08:13.040631 systemd-logind[1336]: New session 23 of user core. Oct 2 22:08:13.041091 systemd[1]: Started session-23.scope. Oct 2 22:08:13.044000 audit[3268]: USER_START pid=3268 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:13.046000 audit[3270]: CRED_ACQ pid=3270 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:13.160837 kubelet[2452]: E1002 22:08:13.160799 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:08:13.400488 sshd[3268]: pam_unix(sshd:session): session closed for user core Oct 2 22:08:13.400000 audit[3268]: USER_END pid=3268 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:13.400000 audit[3268]: CRED_DISP pid=3268 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:13.403928 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 22:08:13.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.20.17:22-10.200.12.6:51832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:13.404653 systemd-logind[1336]: Session 23 logged out. Waiting for processes to exit. Oct 2 22:08:13.404824 systemd[1]: sshd@20-10.200.20.17:22-10.200.12.6:51832.service: Deactivated successfully. Oct 2 22:08:13.405934 systemd-logind[1336]: Removed session 23. Oct 2 22:08:17.265282 kubelet[2452]: E1002 22:08:17.265252 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:22.266812 kubelet[2452]: E1002 22:08:22.266784 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:23.471063 systemd[1]: Started sshd@21-10.200.20.17:22-10.200.12.6:50644.service. Oct 2 22:08:23.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.17:22-10.200.12.6:50644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:23.482974 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 22:08:23.483064 kernel: audit: type=1130 audit(1696284503.470:1284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.17:22-10.200.12.6:50644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:23.873000 audit[3279]: USER_ACCT pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:23.874601 sshd[3279]: Accepted publickey for core from 10.200.12.6 port 50644 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:08:23.899802 sshd[3279]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:08:23.898000 audit[3279]: CRED_ACQ pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:23.922127 kernel: audit: type=1101 audit(1696284503.873:1285): pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:23.922223 kernel: audit: type=1103 audit(1696284503.898:1286): pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:23.935614 kernel: audit: type=1006 audit(1696284503.898:1287): pid=3279 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 22:08:23.898000 audit[3279]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9507870 a2=3 a3=1 items=0 ppid=1 pid=3279 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:23.960830 kernel: audit: type=1300 audit(1696284503.898:1287): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9507870 a2=3 a3=1 items=0 ppid=1 pid=3279 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:23.898000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:23.970584 kernel: audit: type=1327 audit(1696284503.898:1287): proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:23.973029 systemd-logind[1336]: New session 24 of user core. Oct 2 22:08:23.973499 systemd[1]: Started session-24.scope. Oct 2 22:08:23.976000 audit[3279]: USER_START pid=3279 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:24.005028 kernel: audit: type=1105 audit(1696284503.976:1288): pid=3279 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:24.005120 kernel: audit: type=1103 audit(1696284504.003:1289): pid=3281 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:24.003000 audit[3281]: CRED_ACQ pid=3281 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:24.166000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:24.166000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400248bbc0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:08:24.223097 kernel: audit: type=1400 audit(1696284504.166:1290): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:24.223326 kernel: audit: type=1300 audit(1696284504.166:1290): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400248bbc0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:08:24.166000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:08:24.177000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:24.177000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010dd5c0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:08:24.177000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:08:24.177000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:24.177000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010dd5e0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:08:24.177000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:08:24.177000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:08:24.177000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010dd600 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:08:24.177000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:08:24.361089 sshd[3279]: pam_unix(sshd:session): session closed for user core Oct 2 22:08:24.361000 audit[3279]: USER_END pid=3279 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:24.361000 audit[3279]: CRED_DISP pid=3279 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:24.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.20.17:22-10.200.12.6:50644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:24.363555 systemd-logind[1336]: Session 24 logged out. Waiting for processes to exit. Oct 2 22:08:24.363806 systemd[1]: sshd@21-10.200.20.17:22-10.200.12.6:50644.service: Deactivated successfully. Oct 2 22:08:24.364513 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 22:08:24.365256 systemd-logind[1336]: Removed session 24. Oct 2 22:08:27.160534 kubelet[2452]: E1002 22:08:27.160502 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:08:27.268674 kubelet[2452]: E1002 22:08:27.268643 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:32.269778 kubelet[2452]: E1002 22:08:32.269752 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:34.424000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.17:22-10.200.12.6:60614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:34.425180 systemd[1]: Started sshd@22-10.200.20.17:22-10.200.12.6:60614.service. Oct 2 22:08:34.430967 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 22:08:34.431064 kernel: audit: type=1130 audit(1696284514.424:1297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.17:22-10.200.12.6:60614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:34.824000 audit[3292]: USER_ACCT pid=3292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:34.825458 sshd[3292]: Accepted publickey for core from 10.200.12.6 port 60614 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:08:34.827482 sshd[3292]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:08:34.826000 audit[3292]: CRED_ACQ pid=3292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:34.870452 kernel: audit: type=1101 audit(1696284514.824:1298): pid=3292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:34.870569 kernel: audit: type=1103 audit(1696284514.826:1299): pid=3292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:34.887670 kernel: audit: type=1006 audit(1696284514.826:1300): pid=3292 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 22:08:34.887767 kernel: audit: type=1300 audit(1696284514.826:1300): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd524f0b0 a2=3 a3=1 items=0 ppid=1 pid=3292 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:34.826000 audit[3292]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd524f0b0 a2=3 a3=1 items=0 ppid=1 pid=3292 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:34.826000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:34.913712 systemd[1]: Started session-25.scope. Oct 2 22:08:34.919673 kernel: audit: type=1327 audit(1696284514.826:1300): proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:34.919709 systemd-logind[1336]: New session 25 of user core. Oct 2 22:08:34.922000 audit[3292]: USER_START pid=3292 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:34.950000 audit[3294]: CRED_ACQ pid=3294 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:34.973893 kernel: audit: type=1105 audit(1696284514.922:1301): pid=3292 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:34.974005 kernel: audit: type=1103 audit(1696284514.950:1302): pid=3294 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:35.256902 sshd[3292]: pam_unix(sshd:session): session closed for user core Oct 2 22:08:35.257000 audit[3292]: USER_END pid=3292 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:35.261606 systemd-logind[1336]: Session 25 logged out. Waiting for processes to exit. Oct 2 22:08:35.262886 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 22:08:35.264144 systemd-logind[1336]: Removed session 25. Oct 2 22:08:35.264753 systemd[1]: sshd@22-10.200.20.17:22-10.200.12.6:60614.service: Deactivated successfully. Oct 2 22:08:35.258000 audit[3292]: CRED_DISP pid=3292 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:35.307860 kernel: audit: type=1106 audit(1696284515.257:1303): pid=3292 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:35.307980 kernel: audit: type=1104 audit(1696284515.258:1304): pid=3292 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:35.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.20.17:22-10.200.12.6:60614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:37.271513 kubelet[2452]: E1002 22:08:37.271480 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:39.160889 kubelet[2452]: E1002 22:08:39.160859 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:08:42.273082 kubelet[2452]: E1002 22:08:42.273044 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:45.353790 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:08:45.354000 kernel: audit: type=1130 audit(1696284525.324:1306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.17:22-10.200.12.6:35522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:45.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.17:22-10.200.12.6:35522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:45.325354 systemd[1]: Started sshd@23-10.200.20.17:22-10.200.12.6:35522.service. Oct 2 22:08:45.724000 audit[3303]: USER_ACCT pid=3303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:45.725487 sshd[3303]: Accepted publickey for core from 10.200.12.6 port 35522 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:08:45.727477 sshd[3303]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:08:45.732192 systemd[1]: Started session-26.scope. Oct 2 22:08:45.732991 systemd-logind[1336]: New session 26 of user core. Oct 2 22:08:45.726000 audit[3303]: CRED_ACQ pid=3303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:45.771029 kernel: audit: type=1101 audit(1696284525.724:1307): pid=3303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:45.771300 kernel: audit: type=1103 audit(1696284525.726:1308): pid=3303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:45.771335 kernel: audit: type=1006 audit(1696284525.726:1309): pid=3303 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 22:08:45.726000 audit[3303]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0f86e20 a2=3 a3=1 items=0 ppid=1 pid=3303 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:45.810111 kernel: audit: type=1300 audit(1696284525.726:1309): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd0f86e20 a2=3 a3=1 items=0 ppid=1 pid=3303 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:45.726000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:45.818436 kernel: audit: type=1327 audit(1696284525.726:1309): proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:45.736000 audit[3303]: USER_START pid=3303 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:45.844015 kernel: audit: type=1105 audit(1696284525.736:1310): pid=3303 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:45.844138 kernel: audit: type=1103 audit(1696284525.740:1311): pid=3305 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:45.740000 audit[3305]: CRED_ACQ pid=3305 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:46.082981 sshd[3303]: pam_unix(sshd:session): session closed for user core Oct 2 22:08:46.082000 audit[3303]: USER_END pid=3303 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:46.086284 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 22:08:46.087120 systemd[1]: sshd@23-10.200.20.17:22-10.200.12.6:35522.service: Deactivated successfully. Oct 2 22:08:46.082000 audit[3303]: CRED_DISP pid=3303 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:46.130811 kernel: audit: type=1106 audit(1696284526.082:1312): pid=3303 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:46.131298 kernel: audit: type=1104 audit(1696284526.082:1313): pid=3303 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:46.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.20.17:22-10.200.12.6:35522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:46.130981 systemd-logind[1336]: Session 26 logged out. Waiting for processes to exit. Oct 2 22:08:46.131676 systemd-logind[1336]: Removed session 26. Oct 2 22:08:47.274980 kubelet[2452]: E1002 22:08:47.274916 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:52.276421 kubelet[2452]: E1002 22:08:52.276388 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:08:53.160034 kubelet[2452]: E1002 22:08:53.160001 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:08:56.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.17:22-10.200.12.6:38690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:56.150499 systemd[1]: Started sshd@24-10.200.20.17:22-10.200.12.6:38690.service. Oct 2 22:08:56.155422 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:08:56.155503 kernel: audit: type=1130 audit(1696284536.149:1315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.17:22-10.200.12.6:38690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:56.549000 audit[3315]: USER_ACCT pid=3315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:56.550703 sshd[3315]: Accepted publickey for core from 10.200.12.6 port 38690 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:08:56.552827 sshd[3315]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:08:56.557668 systemd[1]: Started session-27.scope. Oct 2 22:08:56.559327 systemd-logind[1336]: New session 27 of user core. Oct 2 22:08:56.551000 audit[3315]: CRED_ACQ pid=3315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:56.595297 kernel: audit: type=1101 audit(1696284536.549:1316): pid=3315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:56.595436 kernel: audit: type=1103 audit(1696284536.551:1317): pid=3315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:56.595470 kernel: audit: type=1006 audit(1696284536.551:1318): pid=3315 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 22:08:56.551000 audit[3315]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1788730 a2=3 a3=1 items=0 ppid=1 pid=3315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:56.634060 kernel: audit: type=1300 audit(1696284536.551:1318): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff1788730 a2=3 a3=1 items=0 ppid=1 pid=3315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:08:56.642564 kernel: audit: type=1327 audit(1696284536.551:1318): proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:56.642630 kernel: audit: type=1105 audit(1696284536.563:1319): pid=3315 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:56.551000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:08:56.563000 audit[3315]: USER_START pid=3315 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:56.566000 audit[3317]: CRED_ACQ pid=3317 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:56.691697 kernel: audit: type=1103 audit(1696284536.566:1320): pid=3317 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:56.910150 sshd[3315]: pam_unix(sshd:session): session closed for user core Oct 2 22:08:56.910000 audit[3315]: USER_END pid=3315 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:56.914254 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 22:08:56.915041 systemd[1]: sshd@24-10.200.20.17:22-10.200.12.6:38690.service: Deactivated successfully. Oct 2 22:08:56.911000 audit[3315]: CRED_DISP pid=3315 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:56.941099 systemd-logind[1336]: Session 27 logged out. Waiting for processes to exit. Oct 2 22:08:56.941968 systemd-logind[1336]: Removed session 27. Oct 2 22:08:56.959215 kernel: audit: type=1106 audit(1696284536.910:1321): pid=3315 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:56.959327 kernel: audit: type=1104 audit(1696284536.911:1322): pid=3315 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:08:56.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.20.17:22-10.200.12.6:38690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:08:57.277752 kubelet[2452]: E1002 22:08:57.277288 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:02.278877 kubelet[2452]: E1002 22:09:02.278847 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:06.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.17:22-10.200.12.6:37696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:09:06.977034 systemd[1]: Started sshd@25-10.200.20.17:22-10.200.12.6:37696.service. Oct 2 22:09:06.982812 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:09:06.982934 kernel: audit: type=1130 audit(1696284546.976:1324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.17:22-10.200.12.6:37696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:09:07.280347 kubelet[2452]: E1002 22:09:07.280012 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:07.382000 audit[3330]: USER_ACCT pid=3330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:07.383375 sshd[3330]: Accepted publickey for core from 10.200.12.6 port 37696 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:09:07.410916 sshd[3330]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:09:07.411191 kernel: audit: type=1101 audit(1696284547.382:1325): pid=3330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:07.411252 kernel: audit: type=1103 audit(1696284547.409:1326): pid=3330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:07.409000 audit[3330]: CRED_ACQ pid=3330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:07.416456 systemd[1]: Started session-28.scope. Oct 2 22:09:07.417873 systemd-logind[1336]: New session 28 of user core. Oct 2 22:09:07.450159 kernel: audit: type=1006 audit(1696284547.409:1327): pid=3330 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 22:09:07.409000 audit[3330]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0b19ae0 a2=3 a3=1 items=0 ppid=1 pid=3330 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:09:07.476026 kernel: audit: type=1300 audit(1696284547.409:1327): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc0b19ae0 a2=3 a3=1 items=0 ppid=1 pid=3330 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:09:07.409000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:09:07.484540 kernel: audit: type=1327 audit(1696284547.409:1327): proctitle=737368643A20636F7265205B707269765D Oct 2 22:09:07.421000 audit[3330]: USER_START pid=3330 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:07.510447 kernel: audit: type=1105 audit(1696284547.421:1328): pid=3330 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:07.424000 audit[3332]: CRED_ACQ pid=3332 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:07.531481 kernel: audit: type=1103 audit(1696284547.424:1329): pid=3332 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:07.775147 sshd[3330]: pam_unix(sshd:session): session closed for user core Oct 2 22:09:07.775000 audit[3330]: USER_END pid=3330 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:07.778714 systemd-logind[1336]: Session 28 logged out. Waiting for processes to exit. Oct 2 22:09:07.779659 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 22:09:07.780713 systemd-logind[1336]: Removed session 28. Oct 2 22:09:07.781193 systemd[1]: sshd@25-10.200.20.17:22-10.200.12.6:37696.service: Deactivated successfully. Oct 2 22:09:07.776000 audit[3330]: CRED_DISP pid=3330 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:07.821958 kernel: audit: type=1106 audit(1696284547.775:1330): pid=3330 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:07.822045 kernel: audit: type=1104 audit(1696284547.776:1331): pid=3330 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:07.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.20.17:22-10.200.12.6:37696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:09:08.160558 kubelet[2452]: E1002 22:09:08.160529 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:09:08.806000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:08.806000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40088c89f0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:09:08.806000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:09:08.816000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:08.816000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=400acb21a0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:09:08.816000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:09:08.817000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:08.817000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=4008880630 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:09:08.817000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:09:08.838000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:08.838000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40088c8a50 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:09:08.838000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:09:09.072000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:09.072000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4f a1=40088806c0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:09:09.072000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:09:09.072000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:09.072000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400adbc060 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:09:09.072000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:09:09.120000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:09.120000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:09.120000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000c79770 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:09:09.120000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:09:09.120000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d377a0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:09:09.120000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:09:12.280802 kubelet[2452]: E1002 22:09:12.280771 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:17.281906 kubelet[2452]: E1002 22:09:17.281880 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:17.869327 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 22:09:17.869446 kernel: audit: type=1130 audit(1696284557.842:1341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.17:22-10.200.12.6:48146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:09:17.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.17:22-10.200.12.6:48146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:09:17.842892 systemd[1]: Started sshd@26-10.200.20.17:22-10.200.12.6:48146.service. Oct 2 22:09:18.240000 audit[3343]: USER_ACCT pid=3343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:18.241571 sshd[3343]: Accepted publickey for core from 10.200.12.6 port 48146 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:09:18.265000 audit[3343]: CRED_ACQ pid=3343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:18.266655 sshd[3343]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:09:18.290042 kernel: audit: type=1101 audit(1696284558.240:1342): pid=3343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:18.290155 kernel: audit: type=1103 audit(1696284558.265:1343): pid=3343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:18.304608 kernel: audit: type=1006 audit(1696284558.265:1344): pid=3343 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 22:09:18.265000 audit[3343]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffded656a0 a2=3 a3=1 items=0 ppid=1 pid=3343 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:09:18.330410 kernel: audit: type=1300 audit(1696284558.265:1344): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffded656a0 a2=3 a3=1 items=0 ppid=1 pid=3343 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:09:18.308767 systemd-logind[1336]: New session 29 of user core. Oct 2 22:09:18.331141 systemd[1]: Started session-29.scope. Oct 2 22:09:18.265000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:09:18.340364 kernel: audit: type=1327 audit(1696284558.265:1344): proctitle=737368643A20636F7265205B707269765D Oct 2 22:09:18.340000 audit[3343]: USER_START pid=3343 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:18.343000 audit[3345]: CRED_ACQ pid=3345 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:18.391326 kernel: audit: type=1105 audit(1696284558.340:1345): pid=3343 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:18.391426 kernel: audit: type=1103 audit(1696284558.343:1346): pid=3345 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:18.648195 sshd[3343]: pam_unix(sshd:session): session closed for user core Oct 2 22:09:18.650000 audit[3343]: USER_END pid=3343 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:18.657117 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 22:09:18.658073 systemd[1]: sshd@26-10.200.20.17:22-10.200.12.6:48146.service: Deactivated successfully. Oct 2 22:09:18.654000 audit[3343]: CRED_DISP pid=3343 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:18.700160 kernel: audit: type=1106 audit(1696284558.650:1347): pid=3343 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:18.700286 kernel: audit: type=1104 audit(1696284558.654:1348): pid=3343 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:18.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.20.17:22-10.200.12.6:48146 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:09:18.700760 systemd-logind[1336]: Session 29 logged out. Waiting for processes to exit. Oct 2 22:09:18.701834 systemd-logind[1336]: Removed session 29. Oct 2 22:09:19.160652 kubelet[2452]: E1002 22:09:19.160616 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bh8vn_kube-system(0cf8447f-4fb8-4561-a50d-aa041f55e60d)\"" pod="kube-system/cilium-bh8vn" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d Oct 2 22:09:22.283062 kubelet[2452]: E1002 22:09:22.283002 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:24.167000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:24.173428 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 22:09:24.173546 kernel: audit: type=1400 audit(1696284564.167:1350): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:24.167000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40013c6ee0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:09:24.226041 kernel: audit: type=1300 audit(1696284564.167:1350): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40013c6ee0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:09:24.167000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:09:24.249730 kernel: audit: type=1327 audit(1696284564.167:1350): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:09:24.249872 kernel: audit: type=1400 audit(1696284564.180:1351): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:24.180000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:24.180000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40013c6f40 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:09:24.300084 kernel: audit: type=1300 audit(1696284564.180:1351): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40013c6f40 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:09:24.180000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:09:24.324480 kernel: audit: type=1327 audit(1696284564.180:1351): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:09:24.324586 kernel: audit: type=1400 audit(1696284564.180:1352): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:24.180000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:24.180000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e54a40 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:09:24.374685 kernel: audit: type=1300 audit(1696284564.180:1352): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e54a40 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:09:24.180000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:09:24.400094 kernel: audit: type=1327 audit(1696284564.180:1352): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:09:24.400176 kernel: audit: type=1400 audit(1696284564.180:1353): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:24.180000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:09:24.180000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e54a80 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:09:24.180000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:09:27.284898 kubelet[2452]: E1002 22:09:27.284862 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:28.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.17:22-10.200.12.6:35952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:09:28.716281 systemd[1]: Started sshd@27-10.200.20.17:22-10.200.12.6:35952.service. Oct 2 22:09:29.113000 audit[3357]: USER_ACCT pid=3357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:29.114606 sshd[3357]: Accepted publickey for core from 10.200.12.6 port 35952 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:09:29.115000 audit[3357]: CRED_ACQ pid=3357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:29.115000 audit[3357]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff87b9400 a2=3 a3=1 items=0 ppid=1 pid=3357 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:09:29.115000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:09:29.116468 sshd[3357]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:09:29.120712 systemd[1]: Started session-30.scope. Oct 2 22:09:29.122925 systemd-logind[1336]: New session 30 of user core. Oct 2 22:09:29.130000 audit[3357]: USER_START pid=3357 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:29.132000 audit[3359]: CRED_ACQ pid=3359 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:29.474167 sshd[3357]: pam_unix(sshd:session): session closed for user core Oct 2 22:09:29.474000 audit[3357]: USER_END pid=3357 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:29.477560 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 22:09:29.478323 systemd[1]: sshd@27-10.200.20.17:22-10.200.12.6:35952.service: Deactivated successfully. Oct 2 22:09:29.480828 kernel: kauditd_printk_skb: 10 callbacks suppressed Oct 2 22:09:29.480883 kernel: audit: type=1106 audit(1696284569.474:1360): pid=3357 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:29.481491 systemd-logind[1336]: Session 30 logged out. Waiting for processes to exit. Oct 2 22:09:29.482381 systemd-logind[1336]: Removed session 30. Oct 2 22:09:29.474000 audit[3357]: CRED_DISP pid=3357 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:29.530749 kernel: audit: type=1104 audit(1696284569.474:1361): pid=3357 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:29.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.17:22-10.200.12.6:35952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:09:29.541873 systemd[1]: Started sshd@28-10.200.20.17:22-10.200.12.6:35964.service. Oct 2 22:09:29.552702 kernel: audit: type=1131 audit(1696284569.477:1362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.20.17:22-10.200.12.6:35952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:09:29.552798 kernel: audit: type=1130 audit(1696284569.545:1363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.17:22-10.200.12.6:35964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:09:29.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.17:22-10.200.12.6:35964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:09:29.942000 audit[3368]: USER_ACCT pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:29.943423 sshd[3368]: Accepted publickey for core from 10.200.12.6 port 35964 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:09:29.969973 kernel: audit: type=1101 audit(1696284569.942:1364): pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:29.970084 kernel: audit: type=1103 audit(1696284569.968:1365): pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:29.968000 audit[3368]: CRED_ACQ pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:29.970409 sshd[3368]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:09:29.975395 systemd[1]: Started session-31.scope. Oct 2 22:09:29.976674 systemd-logind[1336]: New session 31 of user core. Oct 2 22:09:30.007756 kernel: audit: type=1006 audit(1696284569.968:1366): pid=3368 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=31 res=1 Oct 2 22:09:30.007912 kernel: audit: type=1300 audit(1696284569.968:1366): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5a91a60 a2=3 a3=1 items=0 ppid=1 pid=3368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:09:29.968000 audit[3368]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5a91a60 a2=3 a3=1 items=0 ppid=1 pid=3368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:09:29.968000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:09:30.039827 kernel: audit: type=1327 audit(1696284569.968:1366): proctitle=737368643A20636F7265205B707269765D Oct 2 22:09:30.039928 kernel: audit: type=1105 audit(1696284569.993:1367): pid=3368 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:29.993000 audit[3368]: USER_START pid=3368 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:29.996000 audit[3370]: CRED_ACQ pid=3370 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:32.251815 env[1354]: time="2023-10-02T22:09:32.251618633Z" level=info msg="StopPodSandbox for \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\"" Oct 2 22:09:32.251815 env[1354]: time="2023-10-02T22:09:32.251699193Z" level=info msg="Container to stop \"35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 22:09:32.254819 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c-shm.mount: Deactivated successfully. Oct 2 22:09:32.266000 audit: BPF prog-id=116 op=UNLOAD Oct 2 22:09:32.267011 systemd[1]: cri-containerd-3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c.scope: Deactivated successfully. Oct 2 22:09:32.270000 audit: BPF prog-id=119 op=UNLOAD Oct 2 22:09:32.278816 env[1354]: time="2023-10-02T22:09:32.278779862Z" level=info msg="StopContainer for \"65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073\" with timeout 30 (s)" Oct 2 22:09:32.279459 env[1354]: time="2023-10-02T22:09:32.279433102Z" level=info msg="Stop container \"65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073\" with signal terminated" Oct 2 22:09:32.287466 kubelet[2452]: E1002 22:09:32.287440 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:32.312262 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c-rootfs.mount: Deactivated successfully. Oct 2 22:09:32.354000 audit: BPF prog-id=128 op=UNLOAD Oct 2 22:09:32.355510 systemd[1]: cri-containerd-65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073.scope: Deactivated successfully. Oct 2 22:09:32.362000 audit: BPF prog-id=131 op=UNLOAD Oct 2 22:09:32.381963 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073-rootfs.mount: Deactivated successfully. Oct 2 22:09:32.391751 env[1354]: time="2023-10-02T22:09:32.391705941Z" level=info msg="shim disconnected" id=3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c Oct 2 22:09:32.391751 env[1354]: time="2023-10-02T22:09:32.391752101Z" level=warning msg="cleaning up after shim disconnected" id=3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c namespace=k8s.io Oct 2 22:09:32.392559 env[1354]: time="2023-10-02T22:09:32.391762101Z" level=info msg="cleaning up dead shim" Oct 2 22:09:32.395531 env[1354]: time="2023-10-02T22:09:32.395496705Z" level=info msg="shim disconnected" id=65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073 Oct 2 22:09:32.395657 env[1354]: time="2023-10-02T22:09:32.395640945Z" level=warning msg="cleaning up after shim disconnected" id=65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073 namespace=k8s.io Oct 2 22:09:32.395730 env[1354]: time="2023-10-02T22:09:32.395718106Z" level=info msg="cleaning up dead shim" Oct 2 22:09:32.408522 env[1354]: time="2023-10-02T22:09:32.408465719Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:09:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3413 runtime=io.containerd.runc.v2\n" Oct 2 22:09:32.408796 env[1354]: time="2023-10-02T22:09:32.408767199Z" level=info msg="TearDown network for sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" successfully" Oct 2 22:09:32.408846 env[1354]: time="2023-10-02T22:09:32.408795439Z" level=info msg="StopPodSandbox for \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" returns successfully" Oct 2 22:09:32.411913 env[1354]: time="2023-10-02T22:09:32.411887403Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:09:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3417 runtime=io.containerd.runc.v2\n" Oct 2 22:09:32.420173 env[1354]: time="2023-10-02T22:09:32.420132931Z" level=info msg="StopContainer for \"65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073\" returns successfully" Oct 2 22:09:32.421337 env[1354]: time="2023-10-02T22:09:32.421313253Z" level=info msg="StopPodSandbox for \"16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428\"" Oct 2 22:09:32.421470 env[1354]: time="2023-10-02T22:09:32.421451253Z" level=info msg="Container to stop \"65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 22:09:32.424149 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428-shm.mount: Deactivated successfully. Oct 2 22:09:32.437000 audit: BPF prog-id=124 op=UNLOAD Oct 2 22:09:32.437938 systemd[1]: cri-containerd-16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428.scope: Deactivated successfully. Oct 2 22:09:32.440000 audit: BPF prog-id=127 op=UNLOAD Oct 2 22:09:32.470227 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428-rootfs.mount: Deactivated successfully. Oct 2 22:09:32.479551 kubelet[2452]: I1002 22:09:32.479519 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cilium-run\") pod \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " Oct 2 22:09:32.479734 kubelet[2452]: I1002 22:09:32.479583 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cni-path\") pod \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " Oct 2 22:09:32.479734 kubelet[2452]: I1002 22:09:32.479610 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cilium-config-path\") pod \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " Oct 2 22:09:32.479734 kubelet[2452]: I1002 22:09:32.479628 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cilium-cgroup\") pod \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " Oct 2 22:09:32.479734 kubelet[2452]: I1002 22:09:32.479645 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-xtables-lock\") pod \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " Oct 2 22:09:32.479734 kubelet[2452]: I1002 22:09:32.479663 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-host-proc-sys-net\") pod \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " Oct 2 22:09:32.479734 kubelet[2452]: I1002 22:09:32.479680 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-etc-cni-netd\") pod \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " Oct 2 22:09:32.479734 kubelet[2452]: I1002 22:09:32.479700 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/0cf8447f-4fb8-4561-a50d-aa041f55e60d-hubble-tls\") pod \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " Oct 2 22:09:32.479734 kubelet[2452]: I1002 22:09:32.479722 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/0cf8447f-4fb8-4561-a50d-aa041f55e60d-clustermesh-secrets\") pod \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " Oct 2 22:09:32.479939 kubelet[2452]: I1002 22:09:32.479742 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-cmlh8\" (UniqueName: \"kubernetes.io/projected/0cf8447f-4fb8-4561-a50d-aa041f55e60d-kube-api-access-cmlh8\") pod \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " Oct 2 22:09:32.479939 kubelet[2452]: I1002 22:09:32.479761 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-bpf-maps\") pod \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " Oct 2 22:09:32.479939 kubelet[2452]: I1002 22:09:32.479779 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-lib-modules\") pod \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " Oct 2 22:09:32.479939 kubelet[2452]: I1002 22:09:32.479795 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-hostproc\") pod \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " Oct 2 22:09:32.479939 kubelet[2452]: I1002 22:09:32.479812 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-host-proc-sys-kernel\") pod \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\" (UID: \"0cf8447f-4fb8-4561-a50d-aa041f55e60d\") " Oct 2 22:09:32.479939 kubelet[2452]: I1002 22:09:32.479871 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "0cf8447f-4fb8-4561-a50d-aa041f55e60d" (UID: "0cf8447f-4fb8-4561-a50d-aa041f55e60d"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:32.479939 kubelet[2452]: I1002 22:09:32.479904 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "0cf8447f-4fb8-4561-a50d-aa041f55e60d" (UID: "0cf8447f-4fb8-4561-a50d-aa041f55e60d"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:32.479939 kubelet[2452]: I1002 22:09:32.479918 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cni-path" (OuterVolumeSpecName: "cni-path") pod "0cf8447f-4fb8-4561-a50d-aa041f55e60d" (UID: "0cf8447f-4fb8-4561-a50d-aa041f55e60d"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:32.480191 kubelet[2452]: W1002 22:09:32.480085 2452 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/0cf8447f-4fb8-4561-a50d-aa041f55e60d/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 22:09:32.482882 kubelet[2452]: I1002 22:09:32.481641 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "0cf8447f-4fb8-4561-a50d-aa041f55e60d" (UID: "0cf8447f-4fb8-4561-a50d-aa041f55e60d"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:32.482882 kubelet[2452]: I1002 22:09:32.481690 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "0cf8447f-4fb8-4561-a50d-aa041f55e60d" (UID: "0cf8447f-4fb8-4561-a50d-aa041f55e60d"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:32.482882 kubelet[2452]: I1002 22:09:32.481713 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "0cf8447f-4fb8-4561-a50d-aa041f55e60d" (UID: "0cf8447f-4fb8-4561-a50d-aa041f55e60d"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:32.482882 kubelet[2452]: I1002 22:09:32.481729 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "0cf8447f-4fb8-4561-a50d-aa041f55e60d" (UID: "0cf8447f-4fb8-4561-a50d-aa041f55e60d"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:32.482882 kubelet[2452]: I1002 22:09:32.481790 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "0cf8447f-4fb8-4561-a50d-aa041f55e60d" (UID: "0cf8447f-4fb8-4561-a50d-aa041f55e60d"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:32.482882 kubelet[2452]: I1002 22:09:32.481801 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "0cf8447f-4fb8-4561-a50d-aa041f55e60d" (UID: "0cf8447f-4fb8-4561-a50d-aa041f55e60d"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 22:09:32.482882 kubelet[2452]: I1002 22:09:32.481862 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "0cf8447f-4fb8-4561-a50d-aa041f55e60d" (UID: "0cf8447f-4fb8-4561-a50d-aa041f55e60d"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:32.482882 kubelet[2452]: I1002 22:09:32.481881 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-hostproc" (OuterVolumeSpecName: "hostproc") pod "0cf8447f-4fb8-4561-a50d-aa041f55e60d" (UID: "0cf8447f-4fb8-4561-a50d-aa041f55e60d"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:09:32.488056 kubelet[2452]: I1002 22:09:32.487762 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/0cf8447f-4fb8-4561-a50d-aa041f55e60d-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "0cf8447f-4fb8-4561-a50d-aa041f55e60d" (UID: "0cf8447f-4fb8-4561-a50d-aa041f55e60d"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 22:09:32.488673 env[1354]: time="2023-10-02T22:09:32.488441684Z" level=info msg="shim disconnected" id=16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428 Oct 2 22:09:32.488673 env[1354]: time="2023-10-02T22:09:32.488676204Z" level=warning msg="cleaning up after shim disconnected" id=16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428 namespace=k8s.io Oct 2 22:09:32.488794 env[1354]: time="2023-10-02T22:09:32.488687284Z" level=info msg="cleaning up dead shim" Oct 2 22:09:32.491354 kubelet[2452]: I1002 22:09:32.491325 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/0cf8447f-4fb8-4561-a50d-aa041f55e60d-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "0cf8447f-4fb8-4561-a50d-aa041f55e60d" (UID: "0cf8447f-4fb8-4561-a50d-aa041f55e60d"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 22:09:32.494820 kubelet[2452]: I1002 22:09:32.494750 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/0cf8447f-4fb8-4561-a50d-aa041f55e60d-kube-api-access-cmlh8" (OuterVolumeSpecName: "kube-api-access-cmlh8") pod "0cf8447f-4fb8-4561-a50d-aa041f55e60d" (UID: "0cf8447f-4fb8-4561-a50d-aa041f55e60d"). InnerVolumeSpecName "kube-api-access-cmlh8". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 22:09:32.504980 env[1354]: time="2023-10-02T22:09:32.503252219Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:09:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3460 runtime=io.containerd.runc.v2\n" Oct 2 22:09:32.504980 env[1354]: time="2023-10-02T22:09:32.503531260Z" level=info msg="TearDown network for sandbox \"16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428\" successfully" Oct 2 22:09:32.504980 env[1354]: time="2023-10-02T22:09:32.503553020Z" level=info msg="StopPodSandbox for \"16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428\" returns successfully" Oct 2 22:09:32.580247 kubelet[2452]: I1002 22:09:32.580216 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d43e3694-4915-48db-88b7-1bca4a425443-cilium-config-path\") pod \"d43e3694-4915-48db-88b7-1bca4a425443\" (UID: \"d43e3694-4915-48db-88b7-1bca4a425443\") " Oct 2 22:09:32.580431 kubelet[2452]: I1002 22:09:32.580419 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-gnqpl\" (UniqueName: \"kubernetes.io/projected/d43e3694-4915-48db-88b7-1bca4a425443-kube-api-access-gnqpl\") pod \"d43e3694-4915-48db-88b7-1bca4a425443\" (UID: \"d43e3694-4915-48db-88b7-1bca4a425443\") " Oct 2 22:09:32.580526 kubelet[2452]: I1002 22:09:32.580517 2452 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cilium-config-path\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.580589 kubelet[2452]: I1002 22:09:32.580580 2452 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-xtables-lock\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.580646 kubelet[2452]: I1002 22:09:32.580637 2452 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cilium-cgroup\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.580707 kubelet[2452]: I1002 22:09:32.580698 2452 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-host-proc-sys-net\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.580767 kubelet[2452]: I1002 22:09:32.580759 2452 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-etc-cni-netd\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.580825 kubelet[2452]: I1002 22:09:32.580817 2452 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/0cf8447f-4fb8-4561-a50d-aa041f55e60d-hubble-tls\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.580885 kubelet[2452]: I1002 22:09:32.580877 2452 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/0cf8447f-4fb8-4561-a50d-aa041f55e60d-clustermesh-secrets\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.580978 kubelet[2452]: I1002 22:09:32.580940 2452 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-cmlh8\" (UniqueName: \"kubernetes.io/projected/0cf8447f-4fb8-4561-a50d-aa041f55e60d-kube-api-access-cmlh8\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.581069 kubelet[2452]: I1002 22:09:32.581060 2452 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-bpf-maps\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.581137 kubelet[2452]: I1002 22:09:32.581130 2452 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-lib-modules\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.581205 kubelet[2452]: I1002 22:09:32.581197 2452 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-hostproc\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.581290 kubelet[2452]: I1002 22:09:32.581282 2452 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.581374 kubelet[2452]: I1002 22:09:32.581364 2452 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cilium-run\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.581452 kubelet[2452]: I1002 22:09:32.581444 2452 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/0cf8447f-4fb8-4561-a50d-aa041f55e60d-cni-path\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.581517 kubelet[2452]: W1002 22:09:32.580438 2452 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/d43e3694-4915-48db-88b7-1bca4a425443/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 22:09:32.583252 kubelet[2452]: I1002 22:09:32.583225 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/d43e3694-4915-48db-88b7-1bca4a425443-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "d43e3694-4915-48db-88b7-1bca4a425443" (UID: "d43e3694-4915-48db-88b7-1bca4a425443"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 22:09:32.584884 kubelet[2452]: I1002 22:09:32.584856 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d43e3694-4915-48db-88b7-1bca4a425443-kube-api-access-gnqpl" (OuterVolumeSpecName: "kube-api-access-gnqpl") pod "d43e3694-4915-48db-88b7-1bca4a425443" (UID: "d43e3694-4915-48db-88b7-1bca4a425443"). InnerVolumeSpecName "kube-api-access-gnqpl". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 22:09:32.682133 kubelet[2452]: I1002 22:09:32.682090 2452 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-gnqpl\" (UniqueName: \"kubernetes.io/projected/d43e3694-4915-48db-88b7-1bca4a425443-kube-api-access-gnqpl\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.682133 kubelet[2452]: I1002 22:09:32.682130 2452 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d43e3694-4915-48db-88b7-1bca4a425443-cilium-config-path\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:09:32.896340 kubelet[2452]: I1002 22:09:32.896305 2452 scope.go:115] "RemoveContainer" containerID="65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073" Oct 2 22:09:32.899574 env[1354]: time="2023-10-02T22:09:32.899295679Z" level=info msg="RemoveContainer for \"65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073\"" Oct 2 22:09:32.899603 systemd[1]: Removed slice kubepods-besteffort-podd43e3694_4915_48db_88b7_1bca4a425443.slice. Oct 2 22:09:32.904434 systemd[1]: Removed slice kubepods-burstable-pod0cf8447f_4fb8_4561_a50d_aa041f55e60d.slice. Oct 2 22:09:32.906621 env[1354]: time="2023-10-02T22:09:32.906529046Z" level=info msg="RemoveContainer for \"65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073\" returns successfully" Oct 2 22:09:32.906705 kubelet[2452]: I1002 22:09:32.906683 2452 scope.go:115] "RemoveContainer" containerID="65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073" Oct 2 22:09:32.906964 env[1354]: time="2023-10-02T22:09:32.906845447Z" level=error msg="ContainerStatus for \"65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073\": not found" Oct 2 22:09:32.907030 kubelet[2452]: E1002 22:09:32.907005 2452 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073\": not found" containerID="65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073" Oct 2 22:09:32.907067 kubelet[2452]: I1002 22:09:32.907033 2452 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073} err="failed to get container status \"65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073\": rpc error: code = NotFound desc = an error occurred when try to find container \"65f50735d5d184d4e5121796ca18d17614ffe88888ee3aa2769df476e7c75073\": not found" Oct 2 22:09:32.907067 kubelet[2452]: I1002 22:09:32.907042 2452 scope.go:115] "RemoveContainer" containerID="35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f" Oct 2 22:09:32.910420 env[1354]: time="2023-10-02T22:09:32.910172370Z" level=info msg="RemoveContainer for \"35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f\"" Oct 2 22:09:32.917261 env[1354]: time="2023-10-02T22:09:32.917233818Z" level=info msg="RemoveContainer for \"35ee21d8eca1c7ae56d5b49464b49985b2ff2c50e043f389aa7eaea28fa8ff7f\" returns successfully" Oct 2 22:09:33.255028 systemd[1]: var-lib-kubelet-pods-d43e3694\x2d4915\x2d48db\x2d88b7\x2d1bca4a425443-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dgnqpl.mount: Deactivated successfully. Oct 2 22:09:33.255140 systemd[1]: var-lib-kubelet-pods-0cf8447f\x2d4fb8\x2d4561\x2da50d\x2daa041f55e60d-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dcmlh8.mount: Deactivated successfully. Oct 2 22:09:33.255202 systemd[1]: var-lib-kubelet-pods-0cf8447f\x2d4fb8\x2d4561\x2da50d\x2daa041f55e60d-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 22:09:33.255249 systemd[1]: var-lib-kubelet-pods-0cf8447f\x2d4fb8\x2d4561\x2da50d\x2daa041f55e60d-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 22:09:34.161871 kubelet[2452]: I1002 22:09:34.161837 2452 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=0cf8447f-4fb8-4561-a50d-aa041f55e60d path="/var/lib/kubelet/pods/0cf8447f-4fb8-4561-a50d-aa041f55e60d/volumes" Oct 2 22:09:34.162320 kubelet[2452]: I1002 22:09:34.162303 2452 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=d43e3694-4915-48db-88b7-1bca4a425443 path="/var/lib/kubelet/pods/d43e3694-4915-48db-88b7-1bca4a425443/volumes" Oct 2 22:09:34.279155 sshd[3368]: pam_unix(sshd:session): session closed for user core Oct 2 22:09:34.279000 audit[3368]: USER_END pid=3368 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:34.279000 audit[3368]: CRED_DISP pid=3368 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:34.281997 systemd[1]: sshd@28-10.200.20.17:22-10.200.12.6:35964.service: Deactivated successfully. Oct 2 22:09:34.281000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.20.17:22-10.200.12.6:35964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:09:34.282707 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 22:09:34.282879 systemd[1]: session-31.scope: Consumed 1.433s CPU time. Oct 2 22:09:34.283299 systemd-logind[1336]: Session 31 logged out. Waiting for processes to exit. Oct 2 22:09:34.284237 systemd-logind[1336]: Removed session 31. Oct 2 22:09:34.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.17:22-10.200.12.6:35978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:09:34.345195 systemd[1]: Started sshd@29-10.200.20.17:22-10.200.12.6:35978.service. Oct 2 22:09:34.742000 audit[3477]: USER_ACCT pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:34.743499 sshd[3477]: Accepted publickey for core from 10.200.12.6 port 35978 ssh2: RSA SHA256:DMosFEGt9Stiy9crLc9Dv2TJQv2zeEfrhIop01yODHw Oct 2 22:09:34.745468 sshd[3477]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 22:09:34.748304 kernel: kauditd_printk_skb: 11 callbacks suppressed Oct 2 22:09:34.748376 kernel: audit: type=1101 audit(1696284574.742:1379): pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:34.744000 audit[3477]: CRED_ACQ pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:34.794797 kernel: audit: type=1103 audit(1696284574.744:1380): pid=3477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:34.808879 kernel: audit: type=1006 audit(1696284574.744:1381): pid=3477 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Oct 2 22:09:34.809054 kernel: audit: type=1300 audit(1696284574.744:1381): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffdb02e40 a2=3 a3=1 items=0 ppid=1 pid=3477 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:09:34.744000 audit[3477]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffdb02e40 a2=3 a3=1 items=0 ppid=1 pid=3477 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:09:34.744000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 22:09:34.840502 kernel: audit: type=1327 audit(1696284574.744:1381): proctitle=737368643A20636F7265205B707269765D Oct 2 22:09:34.842992 systemd[1]: Started session-32.scope. Oct 2 22:09:34.843366 systemd-logind[1336]: New session 32 of user core. Oct 2 22:09:34.846000 audit[3477]: USER_START pid=3477 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:34.849000 audit[3479]: CRED_ACQ pid=3479 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:34.896764 kernel: audit: type=1105 audit(1696284574.846:1382): pid=3477 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:34.896903 kernel: audit: type=1103 audit(1696284574.849:1383): pid=3479 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:09:35.973402 kubelet[2452]: I1002 22:09:35.973354 2452 topology_manager.go:212] "Topology Admit Handler" Oct 2 22:09:35.973402 kubelet[2452]: E1002 22:09:35.973413 2452 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="0cf8447f-4fb8-4561-a50d-aa041f55e60d" containerName="mount-cgroup" Oct 2 22:09:35.973402 kubelet[2452]: E1002 22:09:35.973423 2452 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="0cf8447f-4fb8-4561-a50d-aa041f55e60d" containerName="mount-cgroup" Oct 2 22:09:35.973402 kubelet[2452]: E1002 22:09:35.973431 2452 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="0cf8447f-4fb8-4561-a50d-aa041f55e60d" containerName="mount-cgroup" Oct 2 22:09:35.973824 kubelet[2452]: E1002 22:09:35.973438 2452 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="d43e3694-4915-48db-88b7-1bca4a425443" containerName="cilium-operator" Oct 2 22:09:35.973824 kubelet[2452]: E1002 22:09:35.973445 2452 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="0cf8447f-4fb8-4561-a50d-aa041f55e60d" containerName="mount-cgroup" Oct 2 22:09:35.973824 kubelet[2452]: E1002 22:09:35.973452 2452 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="0cf8447f-4fb8-4561-a50d-aa041f55e60d" containerName="mount-cgroup" Oct 2 22:09:35.973824 kubelet[2452]: I1002 22:09:35.973470 2452 memory_manager.go:346] "RemoveStaleState removing state" podUID="0cf8447f-4fb8-4561-a50d-aa041f55e60d" containerName="mount-cgroup" Oct 2 22:09:35.973824 kubelet[2452]: I1002 22:09:35.973500 2452 memory_manager.go:346] "RemoveStaleState removing state" podUID="0cf8447f-4fb8-4561-a50d-aa041f55e60d" containerName="mount-cgroup" Oct 2 22:09:35.973824 kubelet[2452]: I1002 22:09:35.973509 2452 memory_manager.go:346] "RemoveStaleState removing state" podUID="d43e3694-4915-48db-88b7-1bca4a425443" containerName="cilium-operator" Oct 2 22:09:35.973824 kubelet[2452]: I1002 22:09:35.973515 2452 memory_manager.go:346] "RemoveStaleState removing state" podUID="0cf8447f-4fb8-4561-a50d-aa041f55e60d" containerName="mount-cgroup" Oct 2 22:09:35.973824 kubelet[2452]: I1002 22:09:35.973520 2452 memory_manager.go:346] "RemoveStaleState removing state" podUID="0cf8447f-4fb8-4561-a50d-aa041f55e60d" containerName="mount-cgroup" Oct 2 22:09:35.973824 kubelet[2452]: E1002 22:09:35.973537 2452 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="0cf8447f-4fb8-4561-a50d-aa041f55e60d" containerName="mount-cgroup" Oct 2 22:09:35.973824 kubelet[2452]: I1002 22:09:35.973551 2452 memory_manager.go:346] "RemoveStaleState removing state" podUID="0cf8447f-4fb8-4561-a50d-aa041f55e60d" containerName="mount-cgroup" Oct 2 22:09:35.973824 kubelet[2452]: I1002 22:09:35.973559 2452 memory_manager.go:346] "RemoveStaleState removing state" podUID="0cf8447f-4fb8-4561-a50d-aa041f55e60d" containerName="mount-cgroup" Oct 2 22:09:35.978328 systemd[1]: Created slice kubepods-burstable-podc36dc9d1_fec9_4ddd_b41e_00f0f1fa2a21.slice. Oct 2 22:09:36.002161 kubelet[2452]: I1002 22:09:36.002120 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-etc-cni-netd\") pod \"cilium-jbhg7\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " pod="kube-system/cilium-jbhg7" Oct 2 22:09:36.002161 kubelet[2452]: I1002 22:09:36.002169 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-hubble-tls\") pod \"cilium-jbhg7\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " pod="kube-system/cilium-jbhg7" Oct 2 22:09:36.002393 kubelet[2452]: I1002 22:09:36.002190 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-cgroup\") pod \"cilium-jbhg7\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " pod="kube-system/cilium-jbhg7" Oct 2 22:09:36.002393 kubelet[2452]: I1002 22:09:36.002210 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-host-proc-sys-net\") pod \"cilium-jbhg7\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " pod="kube-system/cilium-jbhg7" Oct 2 22:09:36.002393 kubelet[2452]: I1002 22:09:36.002228 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-bpf-maps\") pod \"cilium-jbhg7\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " pod="kube-system/cilium-jbhg7" Oct 2 22:09:36.002393 kubelet[2452]: I1002 22:09:36.002255 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-lib-modules\") pod \"cilium-jbhg7\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " pod="kube-system/cilium-jbhg7" Oct 2 22:09:36.002393 kubelet[2452]: I1002 22:09:36.002273 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-ipsec-secrets\") pod \"cilium-jbhg7\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " pod="kube-system/cilium-jbhg7" Oct 2 22:09:36.002393 kubelet[2452]: I1002 22:09:36.002303 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-clustermesh-secrets\") pod \"cilium-jbhg7\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " pod="kube-system/cilium-jbhg7" Oct 2 22:09:36.002393 kubelet[2452]: I1002 22:09:36.002324 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-config-path\") pod \"cilium-jbhg7\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " pod="kube-system/cilium-jbhg7" Oct 2 22:09:36.002393 kubelet[2452]: I1002 22:09:36.002343 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-host-proc-sys-kernel\") pod \"cilium-jbhg7\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " pod="kube-system/cilium-jbhg7" Oct 2 22:09:36.002393 kubelet[2452]: I1002 22:09:36.002360 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-xtables-lock\") pod \"cilium-jbhg7\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " pod="kube-system/cilium-jbhg7" Oct 2 22:09:36.002393 kubelet[2452]: I1002 22:09:36.002380 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-hostproc\") pod \"cilium-jbhg7\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " pod="kube-system/cilium-jbhg7" Oct 2 22:09:36.002393 kubelet[2452]: I1002 22:09:36.002397 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-run\") pod \"cilium-jbhg7\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " pod="kube-system/cilium-jbhg7" Oct 2 22:09:36.002642 kubelet[2452]: I1002 22:09:36.002415 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cni-path\") pod \"cilium-jbhg7\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " pod="kube-system/cilium-jbhg7" Oct 2 22:09:36.002642 kubelet[2452]: I1002 22:09:36.002433 2452 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rfswt\" (UniqueName: \"kubernetes.io/projected/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-kube-api-access-rfswt\") pod \"cilium-jbhg7\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " pod="kube-system/cilium-jbhg7" Oct 2 22:09:36.282182 env[1354]: time="2023-10-02T22:09:36.282025129Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-jbhg7,Uid:c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21,Namespace:kube-system,Attempt:0,}" Oct 2 22:09:36.314732 env[1354]: time="2023-10-02T22:09:36.314652844Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 22:09:36.314732 env[1354]: time="2023-10-02T22:09:36.314692124Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 22:09:36.314934 env[1354]: time="2023-10-02T22:09:36.314714604Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 22:09:36.315014 env[1354]: time="2023-10-02T22:09:36.314994564Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240 pid=3498 runtime=io.containerd.runc.v2 Oct 2 22:09:36.327625 systemd[1]: Started cri-containerd-4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240.scope. Oct 2 22:09:36.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.362002 kernel: audit: type=1400 audit(1696284576.342:1384): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.399507 kernel: audit: type=1400 audit(1696284576.342:1385): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.399605 kernel: audit: type=1400 audit(1696284576.342:1386): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.359000 audit: BPF prog-id=132 op=LOAD Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { bpf } for pid=3507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3498 pid=3507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:09:36.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466336338636366643563363566656133356662366637396437636262 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3498 pid=3507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:09:36.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466336338636366643563363566656133356662366637396437636262 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { bpf } for pid=3507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { bpf } for pid=3507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { bpf } for pid=3507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { bpf } for pid=3507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { bpf } for pid=3507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit: BPF prog-id=133 op=LOAD Oct 2 22:09:36.360000 audit[3507]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3498 pid=3507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:09:36.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466336338636366643563363566656133356662366637396437636262 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { bpf } for pid=3507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { bpf } for pid=3507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { bpf } for pid=3507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { bpf } for pid=3507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit: BPF prog-id=134 op=LOAD Oct 2 22:09:36.360000 audit[3507]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3498 pid=3507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:09:36.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466336338636366643563363566656133356662366637396437636262 Oct 2 22:09:36.360000 audit: BPF prog-id=134 op=UNLOAD Oct 2 22:09:36.360000 audit: BPF prog-id=133 op=UNLOAD Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { bpf } for pid=3507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { bpf } for pid=3507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { bpf } for pid=3507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { perfmon } for pid=3507 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { bpf } for pid=3507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit[3507]: AVC avc: denied { bpf } for pid=3507 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:09:36.360000 audit: BPF prog-id=135 op=LOAD Oct 2 22:09:36.360000 audit[3507]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3498 pid=3507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:09:36.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466336338636366643563363566656133356662366637396437636262 Oct 2 22:09:36.416007 env[1354]: time="2023-10-02T22:09:36.415918750Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-jbhg7,Uid:c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21,Namespace:kube-system,Attempt:0,} returns sandbox id \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\"" Oct 2 22:09:36.420478 env[1354]: time="2023-10-02T22:09:36.420449515Z" level=info msg="CreateContainer within sandbox \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 22:09:36.449967 env[1354]: time="2023-10-02T22:09:36.449902106Z" level=info msg="CreateContainer within sandbox \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db\"" Oct 2 22:09:36.450741 env[1354]: time="2023-10-02T22:09:36.450715667Z" level=info msg="StartContainer for \"a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db\"" Oct 2 22:09:36.470106 systemd[1]: Started cri-containerd-a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db.scope. Oct 2 22:09:36.487936 systemd[1]: cri-containerd-a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db.scope: Deactivated successfully. Oct 2 22:09:36.534969 env[1354]: time="2023-10-02T22:09:36.534836956Z" level=info msg="shim disconnected" id=a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db Oct 2 22:09:36.535176 env[1354]: time="2023-10-02T22:09:36.535156036Z" level=warning msg="cleaning up after shim disconnected" id=a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db namespace=k8s.io Oct 2 22:09:36.535245 env[1354]: time="2023-10-02T22:09:36.535223556Z" level=info msg="cleaning up dead shim" Oct 2 22:09:36.547419 env[1354]: time="2023-10-02T22:09:36.547368809Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:09:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3559 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:09:36Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:09:36.547841 env[1354]: time="2023-10-02T22:09:36.547787809Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 22:09:36.549041 env[1354]: time="2023-10-02T22:09:36.548997530Z" level=error msg="Failed to pipe stdout of container \"a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db\"" error="reading from a closed fifo" Oct 2 22:09:36.550094 env[1354]: time="2023-10-02T22:09:36.550064652Z" level=error msg="Failed to pipe stderr of container \"a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db\"" error="reading from a closed fifo" Oct 2 22:09:36.583910 env[1354]: time="2023-10-02T22:09:36.583831167Z" level=error msg="StartContainer for \"a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:09:36.584169 kubelet[2452]: E1002 22:09:36.584139 2452 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db" Oct 2 22:09:36.584265 kubelet[2452]: E1002 22:09:36.584242 2452 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:09:36.584265 kubelet[2452]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:09:36.584265 kubelet[2452]: rm /hostbin/cilium-mount Oct 2 22:09:36.584265 kubelet[2452]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rfswt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-jbhg7_kube-system(c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:09:36.584409 kubelet[2452]: E1002 22:09:36.584277 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jbhg7" podUID=c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21 Oct 2 22:09:36.913273 env[1354]: time="2023-10-02T22:09:36.913227194Z" level=info msg="CreateContainer within sandbox \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 22:09:36.938493 env[1354]: time="2023-10-02T22:09:36.938443060Z" level=info msg="CreateContainer within sandbox \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf\"" Oct 2 22:09:36.939232 env[1354]: time="2023-10-02T22:09:36.939204781Z" level=info msg="StartContainer for \"038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf\"" Oct 2 22:09:36.964461 systemd[1]: Started cri-containerd-038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf.scope. Oct 2 22:09:36.980421 systemd[1]: cri-containerd-038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf.scope: Deactivated successfully. Oct 2 22:09:36.992546 env[1354]: time="2023-10-02T22:09:36.992491997Z" level=info msg="shim disconnected" id=038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf Oct 2 22:09:36.992546 env[1354]: time="2023-10-02T22:09:36.992541317Z" level=warning msg="cleaning up after shim disconnected" id=038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf namespace=k8s.io Oct 2 22:09:36.992546 env[1354]: time="2023-10-02T22:09:36.992552557Z" level=info msg="cleaning up dead shim" Oct 2 22:09:37.004547 env[1354]: time="2023-10-02T22:09:37.004494010Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:09:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3597 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:09:37Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:09:37.004788 env[1354]: time="2023-10-02T22:09:37.004729330Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 22:09:37.004987 env[1354]: time="2023-10-02T22:09:37.004953970Z" level=error msg="Failed to pipe stderr of container \"038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf\"" error="reading from a closed fifo" Oct 2 22:09:37.005109 env[1354]: time="2023-10-02T22:09:37.005086090Z" level=error msg="Failed to pipe stdout of container \"038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf\"" error="reading from a closed fifo" Oct 2 22:09:37.008513 env[1354]: time="2023-10-02T22:09:37.008471134Z" level=error msg="StartContainer for \"038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:09:37.009003 kubelet[2452]: E1002 22:09:37.008708 2452 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf" Oct 2 22:09:37.009003 kubelet[2452]: E1002 22:09:37.008806 2452 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:09:37.009003 kubelet[2452]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:09:37.009003 kubelet[2452]: rm /hostbin/cilium-mount Oct 2 22:09:37.009003 kubelet[2452]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rfswt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-jbhg7_kube-system(c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:09:37.009003 kubelet[2452]: E1002 22:09:37.008840 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jbhg7" podUID=c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21 Oct 2 22:09:37.288849 kubelet[2452]: E1002 22:09:37.288312 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:37.913470 kubelet[2452]: I1002 22:09:37.913446 2452 scope.go:115] "RemoveContainer" containerID="a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db" Oct 2 22:09:37.913758 kubelet[2452]: I1002 22:09:37.913735 2452 scope.go:115] "RemoveContainer" containerID="a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db" Oct 2 22:09:37.914955 env[1354]: time="2023-10-02T22:09:37.914912487Z" level=info msg="RemoveContainer for \"a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db\"" Oct 2 22:09:37.915598 env[1354]: time="2023-10-02T22:09:37.915569047Z" level=info msg="RemoveContainer for \"a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db\"" Oct 2 22:09:37.915666 env[1354]: time="2023-10-02T22:09:37.915640807Z" level=error msg="RemoveContainer for \"a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db\" failed" error="failed to set removing state for container \"a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db\": container is already in removing state" Oct 2 22:09:37.915820 kubelet[2452]: E1002 22:09:37.915805 2452 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db\": container is already in removing state" containerID="a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db" Oct 2 22:09:37.915911 kubelet[2452]: E1002 22:09:37.915901 2452 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db": container is already in removing state; Skipping pod "cilium-jbhg7_kube-system(c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21)" Oct 2 22:09:37.916292 kubelet[2452]: E1002 22:09:37.916278 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-jbhg7_kube-system(c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21)\"" pod="kube-system/cilium-jbhg7" podUID=c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21 Oct 2 22:09:37.922625 env[1354]: time="2023-10-02T22:09:37.922586615Z" level=info msg="RemoveContainer for \"a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db\" returns successfully" Oct 2 22:09:39.640434 kubelet[2452]: W1002 22:09:39.640373 2452 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc36dc9d1_fec9_4ddd_b41e_00f0f1fa2a21.slice/cri-containerd-a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db.scope WatchSource:0}: container "a63d036ae188b00c2c6db19e189d99fb94d7435fef16230ea695396c31c504db" in namespace "k8s.io": not found Oct 2 22:09:42.289624 kubelet[2452]: E1002 22:09:42.289591 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:42.747640 kubelet[2452]: W1002 22:09:42.747531 2452 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc36dc9d1_fec9_4ddd_b41e_00f0f1fa2a21.slice/cri-containerd-038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf.scope WatchSource:0}: task 038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf not found: not found Oct 2 22:09:47.290346 kubelet[2452]: E1002 22:09:47.290320 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:52.162669 env[1354]: time="2023-10-02T22:09:52.162605335Z" level=info msg="CreateContainer within sandbox \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 22:09:52.192989 env[1354]: time="2023-10-02T22:09:52.192922286Z" level=info msg="CreateContainer within sandbox \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a\"" Oct 2 22:09:52.196033 env[1354]: time="2023-10-02T22:09:52.193506447Z" level=info msg="StartContainer for \"4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a\"" Oct 2 22:09:52.218569 systemd[1]: Started cri-containerd-4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a.scope. Oct 2 22:09:52.234804 systemd[1]: cri-containerd-4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a.scope: Deactivated successfully. Oct 2 22:09:52.251922 env[1354]: time="2023-10-02T22:09:52.251863267Z" level=info msg="shim disconnected" id=4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a Oct 2 22:09:52.251922 env[1354]: time="2023-10-02T22:09:52.251913827Z" level=warning msg="cleaning up after shim disconnected" id=4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a namespace=k8s.io Oct 2 22:09:52.251922 env[1354]: time="2023-10-02T22:09:52.251923667Z" level=info msg="cleaning up dead shim" Oct 2 22:09:52.265046 env[1354]: time="2023-10-02T22:09:52.264981960Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:09:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3634 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:09:52Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:09:52.265530 env[1354]: time="2023-10-02T22:09:52.265470241Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 22:09:52.266034 env[1354]: time="2023-10-02T22:09:52.265993281Z" level=error msg="Failed to pipe stdout of container \"4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a\"" error="reading from a closed fifo" Oct 2 22:09:52.267011 env[1354]: time="2023-10-02T22:09:52.266979002Z" level=error msg="Failed to pipe stderr of container \"4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a\"" error="reading from a closed fifo" Oct 2 22:09:52.272854 env[1354]: time="2023-10-02T22:09:52.272801888Z" level=error msg="StartContainer for \"4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:09:52.273066 kubelet[2452]: E1002 22:09:52.273041 2452 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a" Oct 2 22:09:52.273407 kubelet[2452]: E1002 22:09:52.273152 2452 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:09:52.273407 kubelet[2452]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:09:52.273407 kubelet[2452]: rm /hostbin/cilium-mount Oct 2 22:09:52.273407 kubelet[2452]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rfswt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-jbhg7_kube-system(c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:09:52.273407 kubelet[2452]: E1002 22:09:52.273187 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jbhg7" podUID=c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21 Oct 2 22:09:52.291767 kubelet[2452]: E1002 22:09:52.291743 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:09:52.940833 kubelet[2452]: I1002 22:09:52.940505 2452 scope.go:115] "RemoveContainer" containerID="038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf" Oct 2 22:09:52.940833 kubelet[2452]: I1002 22:09:52.940809 2452 scope.go:115] "RemoveContainer" containerID="038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf" Oct 2 22:09:52.941779 env[1354]: time="2023-10-02T22:09:52.941738136Z" level=info msg="RemoveContainer for \"038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf\"" Oct 2 22:09:52.942414 env[1354]: time="2023-10-02T22:09:52.942378177Z" level=info msg="RemoveContainer for \"038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf\"" Oct 2 22:09:52.942483 env[1354]: time="2023-10-02T22:09:52.942447657Z" level=error msg="RemoveContainer for \"038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf\" failed" error="failed to set removing state for container \"038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf\": container is already in removing state" Oct 2 22:09:52.943118 kubelet[2452]: E1002 22:09:52.942605 2452 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf\": container is already in removing state" containerID="038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf" Oct 2 22:09:52.943118 kubelet[2452]: E1002 22:09:52.942633 2452 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf": container is already in removing state; Skipping pod "cilium-jbhg7_kube-system(c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21)" Oct 2 22:09:52.943118 kubelet[2452]: E1002 22:09:52.942874 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-jbhg7_kube-system(c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21)\"" pod="kube-system/cilium-jbhg7" podUID=c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21 Oct 2 22:09:52.949256 env[1354]: time="2023-10-02T22:09:52.949217944Z" level=info msg="RemoveContainer for \"038de1ae906cfe0efbfd9dedc8d003aeec6863a12805b91feee1e34417e32ccf\" returns successfully" Oct 2 22:09:53.181292 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a-rootfs.mount: Deactivated successfully. Oct 2 22:09:55.357422 kubelet[2452]: W1002 22:09:55.357372 2452 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc36dc9d1_fec9_4ddd_b41e_00f0f1fa2a21.slice/cri-containerd-4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a.scope WatchSource:0}: task 4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a not found: not found Oct 2 22:09:57.292612 kubelet[2452]: E1002 22:09:57.292576 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:02.294158 kubelet[2452]: E1002 22:10:02.294124 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:04.161648 kubelet[2452]: E1002 22:10:04.161613 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-jbhg7_kube-system(c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21)\"" pod="kube-system/cilium-jbhg7" podUID=c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21 Oct 2 22:10:07.294852 kubelet[2452]: E1002 22:10:07.294821 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:08.807000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:08.813180 kernel: kauditd_printk_skb: 54 callbacks suppressed Oct 2 22:10:08.813276 kernel: audit: type=1400 audit(1696284608.807:1402): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:08.807000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40096a3170 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:10:08.863257 kernel: audit: type=1300 audit(1696284608.807:1402): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40096a3170 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:10:08.807000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:10:08.887909 kernel: audit: type=1327 audit(1696284608.807:1402): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:10:08.817000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:08.910379 kernel: audit: type=1400 audit(1696284608.817:1403): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:08.817000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40084f95e0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:10:08.938317 kernel: audit: type=1300 audit(1696284608.817:1403): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40084f95e0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:10:08.817000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:10:08.966719 kernel: audit: type=1327 audit(1696284608.817:1403): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:10:08.818000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:08.990371 kernel: audit: type=1400 audit(1696284608.818:1404): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:08.990518 kernel: audit: type=1300 audit(1696284608.818:1404): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4003e3c3c0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:10:08.818000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4003e3c3c0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:10:08.818000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:10:09.042054 kernel: audit: type=1327 audit(1696284608.818:1404): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:10:08.839000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:09.065999 kernel: audit: type=1400 audit(1696284608.839:1405): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:08.839000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40096a3bf0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:10:08.839000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:10:09.073000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:09.073000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40096a3d70 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:10:09.073000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:10:09.073000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:09.073000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=40087ebfa0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:10:09.073000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:10:09.121000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:09.121000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000eb6270 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:10:09.121000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:10:09.121000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:09.121000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000e55140 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:10:09.121000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:10:12.116631 env[1354]: time="2023-10-02T22:10:12.116583836Z" level=info msg="StopPodSandbox for \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\"" Oct 2 22:10:12.117001 env[1354]: time="2023-10-02T22:10:12.116686556Z" level=info msg="TearDown network for sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" successfully" Oct 2 22:10:12.117001 env[1354]: time="2023-10-02T22:10:12.116731996Z" level=info msg="StopPodSandbox for \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" returns successfully" Oct 2 22:10:12.117218 env[1354]: time="2023-10-02T22:10:12.117176757Z" level=info msg="RemovePodSandbox for \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\"" Oct 2 22:10:12.117261 env[1354]: time="2023-10-02T22:10:12.117216717Z" level=info msg="Forcibly stopping sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\"" Oct 2 22:10:12.117305 env[1354]: time="2023-10-02T22:10:12.117286077Z" level=info msg="TearDown network for sandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" successfully" Oct 2 22:10:12.125955 env[1354]: time="2023-10-02T22:10:12.125905845Z" level=info msg="RemovePodSandbox \"3b1939097b25e5a08e858b7cdabc255c49436c31ba96c667fe8248d6fb16e52c\" returns successfully" Oct 2 22:10:12.126472 env[1354]: time="2023-10-02T22:10:12.126447246Z" level=info msg="StopPodSandbox for \"16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428\"" Oct 2 22:10:12.126604 env[1354]: time="2023-10-02T22:10:12.126525206Z" level=info msg="TearDown network for sandbox \"16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428\" successfully" Oct 2 22:10:12.126604 env[1354]: time="2023-10-02T22:10:12.126552126Z" level=info msg="StopPodSandbox for \"16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428\" returns successfully" Oct 2 22:10:12.127760 env[1354]: time="2023-10-02T22:10:12.126885766Z" level=info msg="RemovePodSandbox for \"16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428\"" Oct 2 22:10:12.127760 env[1354]: time="2023-10-02T22:10:12.126909487Z" level=info msg="Forcibly stopping sandbox \"16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428\"" Oct 2 22:10:12.127760 env[1354]: time="2023-10-02T22:10:12.126992847Z" level=info msg="TearDown network for sandbox \"16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428\" successfully" Oct 2 22:10:12.134285 env[1354]: time="2023-10-02T22:10:12.134202094Z" level=info msg="RemovePodSandbox \"16a90df90f98cdcd18d0b4498f1c4707d16af6ab3f9d9908bdb7a39c47ebc428\" returns successfully" Oct 2 22:10:12.295936 kubelet[2452]: E1002 22:10:12.295913 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:16.164718 env[1354]: time="2023-10-02T22:10:16.164426725Z" level=info msg="CreateContainer within sandbox \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 22:10:16.189704 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount761565460.mount: Deactivated successfully. Oct 2 22:10:16.193918 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount124931342.mount: Deactivated successfully. Oct 2 22:10:16.207688 env[1354]: time="2023-10-02T22:10:16.207634648Z" level=info msg="CreateContainer within sandbox \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86\"" Oct 2 22:10:16.208198 env[1354]: time="2023-10-02T22:10:16.208170568Z" level=info msg="StartContainer for \"26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86\"" Oct 2 22:10:16.235342 systemd[1]: Started cri-containerd-26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86.scope. Oct 2 22:10:16.251707 systemd[1]: cri-containerd-26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86.scope: Deactivated successfully. Oct 2 22:10:16.289183 env[1354]: time="2023-10-02T22:10:16.289126249Z" level=info msg="shim disconnected" id=26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86 Oct 2 22:10:16.289183 env[1354]: time="2023-10-02T22:10:16.289181169Z" level=warning msg="cleaning up after shim disconnected" id=26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86 namespace=k8s.io Oct 2 22:10:16.289403 env[1354]: time="2023-10-02T22:10:16.289191609Z" level=info msg="cleaning up dead shim" Oct 2 22:10:16.301307 env[1354]: time="2023-10-02T22:10:16.301249181Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:10:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3674 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T22:10:16Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 22:10:16.301557 env[1354]: time="2023-10-02T22:10:16.301498462Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 22:10:16.303035 env[1354]: time="2023-10-02T22:10:16.302994543Z" level=error msg="Failed to pipe stdout of container \"26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86\"" error="reading from a closed fifo" Oct 2 22:10:16.304021 env[1354]: time="2023-10-02T22:10:16.303986944Z" level=error msg="Failed to pipe stderr of container \"26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86\"" error="reading from a closed fifo" Oct 2 22:10:16.307615 env[1354]: time="2023-10-02T22:10:16.307555828Z" level=error msg="StartContainer for \"26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 22:10:16.307878 kubelet[2452]: E1002 22:10:16.307850 2452 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86" Oct 2 22:10:16.308147 kubelet[2452]: E1002 22:10:16.308002 2452 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 22:10:16.308147 kubelet[2452]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 22:10:16.308147 kubelet[2452]: rm /hostbin/cilium-mount Oct 2 22:10:16.308147 kubelet[2452]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rfswt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-jbhg7_kube-system(c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 22:10:16.308147 kubelet[2452]: E1002 22:10:16.308046 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jbhg7" podUID=c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21 Oct 2 22:10:16.981841 kubelet[2452]: I1002 22:10:16.981816 2452 scope.go:115] "RemoveContainer" containerID="4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a" Oct 2 22:10:16.982364 kubelet[2452]: I1002 22:10:16.982348 2452 scope.go:115] "RemoveContainer" containerID="4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a" Oct 2 22:10:16.984062 env[1354]: time="2023-10-02T22:10:16.984011822Z" level=info msg="RemoveContainer for \"4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a\"" Oct 2 22:10:16.984632 env[1354]: time="2023-10-02T22:10:16.984606303Z" level=info msg="RemoveContainer for \"4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a\"" Oct 2 22:10:16.985033 env[1354]: time="2023-10-02T22:10:16.985001783Z" level=error msg="RemoveContainer for \"4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a\" failed" error="failed to set removing state for container \"4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a\": container is already in removing state" Oct 2 22:10:16.985350 kubelet[2452]: E1002 22:10:16.985335 2452 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a\": container is already in removing state" containerID="4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a" Oct 2 22:10:16.985506 kubelet[2452]: E1002 22:10:16.985494 2452 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a": container is already in removing state; Skipping pod "cilium-jbhg7_kube-system(c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21)" Oct 2 22:10:16.985906 kubelet[2452]: E1002 22:10:16.985892 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-jbhg7_kube-system(c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21)\"" pod="kube-system/cilium-jbhg7" podUID=c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21 Oct 2 22:10:16.991810 env[1354]: time="2023-10-02T22:10:16.991782230Z" level=info msg="RemoveContainer for \"4494ee9a659df53499a663aad95107a3d40aa6799d1566971f6072fe501d971a\" returns successfully" Oct 2 22:10:17.187897 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86-rootfs.mount: Deactivated successfully. Oct 2 22:10:17.297909 kubelet[2452]: E1002 22:10:17.297883 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:19.393621 kubelet[2452]: W1002 22:10:19.393572 2452 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc36dc9d1_fec9_4ddd_b41e_00f0f1fa2a21.slice/cri-containerd-26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86.scope WatchSource:0}: task 26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86 not found: not found Oct 2 22:10:22.299009 kubelet[2452]: E1002 22:10:22.298979 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:24.169000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:24.174965 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 22:10:24.175092 kernel: audit: type=1400 audit(1696284624.169:1410): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:24.169000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b57c0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:10:24.226092 kernel: audit: type=1300 audit(1696284624.169:1410): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b57c0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:10:24.169000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:10:24.251435 kernel: audit: type=1327 audit(1696284624.169:1410): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:10:24.251564 kernel: audit: type=1400 audit(1696284624.180:1411): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:24.180000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:24.180000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b57e0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:10:24.301460 kernel: audit: type=1300 audit(1696284624.180:1411): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b57e0 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:10:24.180000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:10:24.325824 kernel: audit: type=1327 audit(1696284624.180:1411): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:10:24.325939 kernel: audit: type=1400 audit(1696284624.180:1412): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:24.180000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:24.180000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b5800 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:10:24.377674 kernel: audit: type=1300 audit(1696284624.180:1412): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b5800 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:10:24.180000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:10:24.401592 kernel: audit: type=1327 audit(1696284624.180:1412): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:10:24.401665 kernel: audit: type=1400 audit(1696284624.181:1413): avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:24.181000 audit[2338]: AVC avc: denied { watch } for pid=2338 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:24.181000 audit[2338]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40026b5920 a2=fc6 a3=0 items=0 ppid=2179 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:10:24.181000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:10:27.300028 kubelet[2452]: E1002 22:10:27.299992 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:32.160315 kubelet[2452]: E1002 22:10:32.160282 2452 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-jbhg7_kube-system(c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21)\"" pod="kube-system/cilium-jbhg7" podUID=c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21 Oct 2 22:10:32.300708 kubelet[2452]: E1002 22:10:32.300677 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:37.269131 env[1354]: time="2023-10-02T22:10:37.269075695Z" level=info msg="StopPodSandbox for \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\"" Oct 2 22:10:37.269479 env[1354]: time="2023-10-02T22:10:37.269143055Z" level=info msg="Container to stop \"26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 22:10:37.270670 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240-shm.mount: Deactivated successfully. Oct 2 22:10:37.282000 audit: BPF prog-id=132 op=UNLOAD Oct 2 22:10:37.282745 systemd[1]: cri-containerd-4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240.scope: Deactivated successfully. Oct 2 22:10:37.288633 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 22:10:37.288767 kernel: audit: type=1334 audit(1696284637.282:1414): prog-id=132 op=UNLOAD Oct 2 22:10:37.297000 audit: BPF prog-id=135 op=UNLOAD Oct 2 22:10:37.306963 kernel: audit: type=1334 audit(1696284637.297:1415): prog-id=135 op=UNLOAD Oct 2 22:10:37.307480 kubelet[2452]: E1002 22:10:37.307452 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:37.332144 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240-rootfs.mount: Deactivated successfully. Oct 2 22:10:37.387686 env[1354]: time="2023-10-02T22:10:37.387637411Z" level=info msg="shim disconnected" id=4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240 Oct 2 22:10:37.387686 env[1354]: time="2023-10-02T22:10:37.387685291Z" level=warning msg="cleaning up after shim disconnected" id=4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240 namespace=k8s.io Oct 2 22:10:37.387912 env[1354]: time="2023-10-02T22:10:37.387695291Z" level=info msg="cleaning up dead shim" Oct 2 22:10:37.398132 sshd[3477]: pam_unix(sshd:session): session closed for user core Oct 2 22:10:37.399000 audit[3477]: USER_END pid=3477 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:10:37.402464 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 22:10:37.402654 systemd[1]: session-32.scope: Consumed 1.213s CPU time. Oct 2 22:10:37.403024 systemd[1]: sshd@29-10.200.20.17:22-10.200.12.6:35978.service: Deactivated successfully. Oct 2 22:10:37.400000 audit[3477]: CRED_DISP pid=3477 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:10:37.427888 systemd-logind[1336]: Session 32 logged out. Waiting for processes to exit. Oct 2 22:10:37.428895 systemd-logind[1336]: Removed session 32. Oct 2 22:10:37.449889 kernel: audit: type=1106 audit(1696284637.399:1416): pid=3477 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:10:37.455066 kernel: audit: type=1104 audit(1696284637.400:1417): pid=3477 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 22:10:37.455113 kernel: audit: type=1131 audit(1696284637.400:1418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.17:22-10.200.12.6:35978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:10:37.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.20.17:22-10.200.12.6:35978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 22:10:37.455292 env[1354]: time="2023-10-02T22:10:37.450582272Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:10:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3708 runtime=io.containerd.runc.v2\n" Oct 2 22:10:37.455292 env[1354]: time="2023-10-02T22:10:37.450886393Z" level=info msg="TearDown network for sandbox \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\" successfully" Oct 2 22:10:37.455292 env[1354]: time="2023-10-02T22:10:37.450905913Z" level=info msg="StopPodSandbox for \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\" returns successfully" Oct 2 22:10:37.627925 kubelet[2452]: I1002 22:10:37.627887 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-etc-cni-netd\") pod \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " Oct 2 22:10:37.628113 kubelet[2452]: I1002 22:10:37.627981 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21" (UID: "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:10:37.628113 kubelet[2452]: I1002 22:10:37.628020 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-lib-modules\") pod \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " Oct 2 22:10:37.628113 kubelet[2452]: I1002 22:10:37.628047 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-ipsec-secrets\") pod \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " Oct 2 22:10:37.628113 kubelet[2452]: I1002 22:10:37.628079 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21" (UID: "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:10:37.629980 kubelet[2452]: I1002 22:10:37.628365 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-config-path\") pod \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " Oct 2 22:10:37.629980 kubelet[2452]: I1002 22:10:37.628400 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-rfswt\" (UniqueName: \"kubernetes.io/projected/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-kube-api-access-rfswt\") pod \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " Oct 2 22:10:37.629980 kubelet[2452]: I1002 22:10:37.628421 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-cgroup\") pod \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " Oct 2 22:10:37.629980 kubelet[2452]: I1002 22:10:37.628469 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-bpf-maps\") pod \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " Oct 2 22:10:37.629980 kubelet[2452]: I1002 22:10:37.628490 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-host-proc-sys-kernel\") pod \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " Oct 2 22:10:37.629980 kubelet[2452]: I1002 22:10:37.628509 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-host-proc-sys-net\") pod \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " Oct 2 22:10:37.629980 kubelet[2452]: I1002 22:10:37.628530 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-clustermesh-secrets\") pod \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " Oct 2 22:10:37.629980 kubelet[2452]: I1002 22:10:37.628546 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-hostproc\") pod \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " Oct 2 22:10:37.629980 kubelet[2452]: I1002 22:10:37.628565 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-hubble-tls\") pod \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " Oct 2 22:10:37.629980 kubelet[2452]: I1002 22:10:37.628604 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-xtables-lock\") pod \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " Oct 2 22:10:37.629980 kubelet[2452]: I1002 22:10:37.628621 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cni-path\") pod \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " Oct 2 22:10:37.629980 kubelet[2452]: I1002 22:10:37.628639 2452 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-run\") pod \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\" (UID: \"c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21\") " Oct 2 22:10:37.629980 kubelet[2452]: I1002 22:10:37.628666 2452 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-etc-cni-netd\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:10:37.629980 kubelet[2452]: I1002 22:10:37.628677 2452 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-lib-modules\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:10:37.629980 kubelet[2452]: I1002 22:10:37.628693 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21" (UID: "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:10:37.629980 kubelet[2452]: W1002 22:10:37.628801 2452 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 22:10:37.630516 kubelet[2452]: I1002 22:10:37.630485 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21" (UID: "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 22:10:37.633421 systemd[1]: var-lib-kubelet-pods-c36dc9d1\x2dfec9\x2d4ddd\x2db41e\x2d00f0f1fa2a21-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 22:10:37.635169 kubelet[2452]: I1002 22:10:37.635146 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21" (UID: "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 22:10:37.636517 systemd[1]: var-lib-kubelet-pods-c36dc9d1\x2dfec9\x2d4ddd\x2db41e\x2d00f0f1fa2a21-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2drfswt.mount: Deactivated successfully. Oct 2 22:10:37.637570 kubelet[2452]: I1002 22:10:37.637536 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-kube-api-access-rfswt" (OuterVolumeSpecName: "kube-api-access-rfswt") pod "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21" (UID: "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21"). InnerVolumeSpecName "kube-api-access-rfswt". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 22:10:37.637638 kubelet[2452]: I1002 22:10:37.637575 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-hostproc" (OuterVolumeSpecName: "hostproc") pod "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21" (UID: "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:10:37.641604 systemd[1]: var-lib-kubelet-pods-c36dc9d1\x2dfec9\x2d4ddd\x2db41e\x2d00f0f1fa2a21-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 22:10:37.642965 kubelet[2452]: I1002 22:10:37.642910 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21" (UID: "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 22:10:37.643036 kubelet[2452]: I1002 22:10:37.642971 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21" (UID: "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:10:37.643036 kubelet[2452]: I1002 22:10:37.642993 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cni-path" (OuterVolumeSpecName: "cni-path") pod "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21" (UID: "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:10:37.643036 kubelet[2452]: I1002 22:10:37.643011 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21" (UID: "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:10:37.643036 kubelet[2452]: I1002 22:10:37.643026 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21" (UID: "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:10:37.643140 kubelet[2452]: I1002 22:10:37.643043 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21" (UID: "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:10:37.643140 kubelet[2452]: I1002 22:10:37.643058 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21" (UID: "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 22:10:37.643140 kubelet[2452]: I1002 22:10:37.643127 2452 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21" (UID: "c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 22:10:37.729537 kubelet[2452]: I1002 22:10:37.729499 2452 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-rfswt\" (UniqueName: \"kubernetes.io/projected/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-kube-api-access-rfswt\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:10:37.729657 kubelet[2452]: I1002 22:10:37.729546 2452 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-cgroup\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:10:37.729657 kubelet[2452]: I1002 22:10:37.729572 2452 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-bpf-maps\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:10:37.729657 kubelet[2452]: I1002 22:10:37.729591 2452 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:10:37.729657 kubelet[2452]: I1002 22:10:37.729612 2452 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-host-proc-sys-net\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:10:37.729657 kubelet[2452]: I1002 22:10:37.729632 2452 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-clustermesh-secrets\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:10:37.729657 kubelet[2452]: I1002 22:10:37.729650 2452 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-hostproc\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:10:37.729657 kubelet[2452]: I1002 22:10:37.729660 2452 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-hubble-tls\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:10:37.729845 kubelet[2452]: I1002 22:10:37.729669 2452 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-xtables-lock\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:10:37.729845 kubelet[2452]: I1002 22:10:37.729680 2452 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cni-path\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:10:37.729845 kubelet[2452]: I1002 22:10:37.729689 2452 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-run\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:10:37.729845 kubelet[2452]: I1002 22:10:37.729698 2452 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:10:37.729845 kubelet[2452]: I1002 22:10:37.729707 2452 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21-cilium-config-path\") on node \"ci-3510.3.0-a-176754823f\" DevicePath \"\"" Oct 2 22:10:38.015740 kubelet[2452]: I1002 22:10:38.015643 2452 scope.go:115] "RemoveContainer" containerID="26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86" Oct 2 22:10:38.017095 env[1354]: time="2023-10-02T22:10:38.016804824Z" level=info msg="RemoveContainer for \"26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86\"" Oct 2 22:10:38.022999 systemd[1]: Removed slice kubepods-burstable-podc36dc9d1_fec9_4ddd_b41e_00f0f1fa2a21.slice. Oct 2 22:10:38.029977 env[1354]: time="2023-10-02T22:10:38.028193555Z" level=info msg="RemoveContainer for \"26fa7add6316de108d520023fb511245a8ba0d0cccaf6dd66b8c23feb68cab86\" returns successfully" Oct 2 22:10:38.162832 kubelet[2452]: I1002 22:10:38.162807 2452 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21 path="/var/lib/kubelet/pods/c36dc9d1-fec9-4ddd-b41e-00f0f1fa2a21/volumes" Oct 2 22:10:38.270686 systemd[1]: var-lib-kubelet-pods-c36dc9d1\x2dfec9\x2d4ddd\x2db41e\x2d00f0f1fa2a21-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 22:10:42.308528 kubelet[2452]: E1002 22:10:42.308491 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:47.309056 kubelet[2452]: E1002 22:10:47.309031 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:50.644485 systemd[1]: cri-containerd-b4a068396ea29103343f74ed46cf8760800f8d671afc55486e440450ebb064ec.scope: Deactivated successfully. Oct 2 22:10:50.644770 systemd[1]: cri-containerd-b4a068396ea29103343f74ed46cf8760800f8d671afc55486e440450ebb064ec.scope: Consumed 4.151s CPU time. Oct 2 22:10:50.647000 audit: BPF prog-id=91 op=UNLOAD Oct 2 22:10:50.647000 audit: BPF prog-id=96 op=UNLOAD Oct 2 22:10:50.661781 kernel: audit: type=1334 audit(1696284650.647:1419): prog-id=91 op=UNLOAD Oct 2 22:10:50.661890 kernel: audit: type=1334 audit(1696284650.647:1420): prog-id=96 op=UNLOAD Oct 2 22:10:50.676055 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b4a068396ea29103343f74ed46cf8760800f8d671afc55486e440450ebb064ec-rootfs.mount: Deactivated successfully. Oct 2 22:10:50.734385 env[1354]: time="2023-10-02T22:10:50.734337736Z" level=info msg="shim disconnected" id=b4a068396ea29103343f74ed46cf8760800f8d671afc55486e440450ebb064ec Oct 2 22:10:50.734792 env[1354]: time="2023-10-02T22:10:50.734771416Z" level=warning msg="cleaning up after shim disconnected" id=b4a068396ea29103343f74ed46cf8760800f8d671afc55486e440450ebb064ec namespace=k8s.io Oct 2 22:10:50.734855 env[1354]: time="2023-10-02T22:10:50.734841817Z" level=info msg="cleaning up dead shim" Oct 2 22:10:50.747779 env[1354]: time="2023-10-02T22:10:50.747732509Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:10:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3738 runtime=io.containerd.runc.v2\n" Oct 2 22:10:51.042590 kubelet[2452]: I1002 22:10:51.041228 2452 scope.go:115] "RemoveContainer" containerID="b4a068396ea29103343f74ed46cf8760800f8d671afc55486e440450ebb064ec" Oct 2 22:10:51.045288 env[1354]: time="2023-10-02T22:10:51.045239075Z" level=info msg="CreateContainer within sandbox \"8acf152fdf23a2092c9990f2c75dc4becb08188af88c08e7f33e0533c4e1fc17\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 22:10:51.061184 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4009931679.mount: Deactivated successfully. Oct 2 22:10:51.067551 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3571897162.mount: Deactivated successfully. Oct 2 22:10:51.082984 env[1354]: time="2023-10-02T22:10:51.082917991Z" level=info msg="CreateContainer within sandbox \"8acf152fdf23a2092c9990f2c75dc4becb08188af88c08e7f33e0533c4e1fc17\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"92fa29d66482bc454baa59e8b2a7c80cbda520ba15d137ce72f0ea78dcf7ff97\"" Oct 2 22:10:51.083433 env[1354]: time="2023-10-02T22:10:51.083402792Z" level=info msg="StartContainer for \"92fa29d66482bc454baa59e8b2a7c80cbda520ba15d137ce72f0ea78dcf7ff97\"" Oct 2 22:10:51.103771 systemd[1]: Started cri-containerd-92fa29d66482bc454baa59e8b2a7c80cbda520ba15d137ce72f0ea78dcf7ff97.scope. Oct 2 22:10:51.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.157533 kernel: audit: type=1400 audit(1696284651.121:1421): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.157668 kernel: audit: type=1400 audit(1696284651.121:1422): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.175988 kernel: audit: type=1400 audit(1696284651.121:1423): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.195654 kernel: audit: type=1400 audit(1696284651.121:1424): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.214628 kernel: audit: type=1400 audit(1696284651.121:1425): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.232700 kernel: audit: type=1400 audit(1696284651.121:1426): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.251555 kernel: audit: type=1400 audit(1696284651.121:1427): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.269347 kernel: audit: type=1400 audit(1696284651.121:1428): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.138000 audit: BPF prog-id=136 op=LOAD Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { bpf } for pid=3759 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2179 pid=3759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:51.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932666132396436363438326263343534626161353965386232613763 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2179 pid=3759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:51.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932666132396436363438326263343534626161353965386232613763 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { bpf } for pid=3759 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { bpf } for pid=3759 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { bpf } for pid=3759 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { bpf } for pid=3759 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { bpf } for pid=3759 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit: BPF prog-id=137 op=LOAD Oct 2 22:10:51.139000 audit[3759]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2179 pid=3759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:51.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932666132396436363438326263343534626161353965386232613763 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { bpf } for pid=3759 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { bpf } for pid=3759 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { bpf } for pid=3759 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { bpf } for pid=3759 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit: BPF prog-id=138 op=LOAD Oct 2 22:10:51.139000 audit[3759]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2179 pid=3759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:51.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932666132396436363438326263343534626161353965386232613763 Oct 2 22:10:51.139000 audit: BPF prog-id=138 op=UNLOAD Oct 2 22:10:51.139000 audit: BPF prog-id=137 op=UNLOAD Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { bpf } for pid=3759 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { bpf } for pid=3759 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { bpf } for pid=3759 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { perfmon } for pid=3759 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { bpf } for pid=3759 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit[3759]: AVC avc: denied { bpf } for pid=3759 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:51.139000 audit: BPF prog-id=139 op=LOAD Oct 2 22:10:51.139000 audit[3759]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2179 pid=3759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:51.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932666132396436363438326263343534626161353965386232613763 Oct 2 22:10:51.283467 env[1354]: time="2023-10-02T22:10:51.283424664Z" level=info msg="StartContainer for \"92fa29d66482bc454baa59e8b2a7c80cbda520ba15d137ce72f0ea78dcf7ff97\" returns successfully" Oct 2 22:10:51.514228 kubelet[2452]: E1002 22:10:51.514084 2452 controller.go:193] "Failed to update lease" err="Put \"https://10.200.20.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-176754823f?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 22:10:52.034073 kubelet[2452]: E1002 22:10:52.033855 2452 controller.go:193] "Failed to update lease" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.17:49690->10.200.20.13:2379: read: connection timed out" Oct 2 22:10:52.038038 systemd[1]: cri-containerd-c14643aaf73d0487cc523055d0965de3171fcd541a443d036a27c2f3a056a513.scope: Deactivated successfully. Oct 2 22:10:52.038354 systemd[1]: cri-containerd-c14643aaf73d0487cc523055d0965de3171fcd541a443d036a27c2f3a056a513.scope: Consumed 2.392s CPU time. Oct 2 22:10:52.045000 audit: BPF prog-id=87 op=UNLOAD Oct 2 22:10:52.045000 audit: BPF prog-id=92 op=UNLOAD Oct 2 22:10:52.073652 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c14643aaf73d0487cc523055d0965de3171fcd541a443d036a27c2f3a056a513-rootfs.mount: Deactivated successfully. Oct 2 22:10:52.093792 env[1354]: time="2023-10-02T22:10:52.093737403Z" level=info msg="shim disconnected" id=c14643aaf73d0487cc523055d0965de3171fcd541a443d036a27c2f3a056a513 Oct 2 22:10:52.093792 env[1354]: time="2023-10-02T22:10:52.093787483Z" level=warning msg="cleaning up after shim disconnected" id=c14643aaf73d0487cc523055d0965de3171fcd541a443d036a27c2f3a056a513 namespace=k8s.io Oct 2 22:10:52.093792 env[1354]: time="2023-10-02T22:10:52.093798403Z" level=info msg="cleaning up dead shim" Oct 2 22:10:52.107278 env[1354]: time="2023-10-02T22:10:52.107232296Z" level=warning msg="cleanup warnings time=\"2023-10-02T22:10:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3801 runtime=io.containerd.runc.v2\n" Oct 2 22:10:52.310291 kubelet[2452]: E1002 22:10:52.310265 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:10:53.039000 audit[3771]: AVC avc: denied { watch } for pid=3771 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:53.039000 audit[3771]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000912000 a2=fc6 a3=0 items=0 ppid=2179 pid=3771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:10:53.039000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:10:53.039000 audit[3771]: AVC avc: denied { watch } for pid=3771 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:10:53.039000 audit[3771]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000053e40 a2=fc6 a3=0 items=0 ppid=2179 pid=3771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c524 key=(null) Oct 2 22:10:53.039000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 22:10:53.053769 kubelet[2452]: I1002 22:10:53.053735 2452 scope.go:115] "RemoveContainer" containerID="c14643aaf73d0487cc523055d0965de3171fcd541a443d036a27c2f3a056a513" Oct 2 22:10:53.055806 env[1354]: time="2023-10-02T22:10:53.055764887Z" level=info msg="CreateContainer within sandbox \"08ed482ef694e68bf1a0d38b721f060d35d594fdc9921a5a59d9b677e2bf142c\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 22:10:53.082897 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount54338538.mount: Deactivated successfully. Oct 2 22:10:53.087147 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2550267136.mount: Deactivated successfully. Oct 2 22:10:53.099284 env[1354]: time="2023-10-02T22:10:53.099238489Z" level=info msg="CreateContainer within sandbox \"08ed482ef694e68bf1a0d38b721f060d35d594fdc9921a5a59d9b677e2bf142c\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"36d8e265e617cf2eb53249e1615e49953188ed09451d9c531b3dca8a7748645a\"" Oct 2 22:10:53.100082 env[1354]: time="2023-10-02T22:10:53.100055410Z" level=info msg="StartContainer for \"36d8e265e617cf2eb53249e1615e49953188ed09451d9c531b3dca8a7748645a\"" Oct 2 22:10:53.122804 systemd[1]: Started cri-containerd-36d8e265e617cf2eb53249e1615e49953188ed09451d9c531b3dca8a7748645a.scope. Oct 2 22:10:53.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit: BPF prog-id=140 op=LOAD Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2191 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:53.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336643865323635653631376366326562353332343965313631356534 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2191 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:53.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336643865323635653631376366326562353332343965313631356534 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit: BPF prog-id=141 op=LOAD Oct 2 22:10:53.139000 audit[3823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2191 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:53.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336643865323635653631376366326562353332343965313631356534 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit: BPF prog-id=142 op=LOAD Oct 2 22:10:53.139000 audit[3823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2191 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:53.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336643865323635653631376366326562353332343965313631356534 Oct 2 22:10:53.139000 audit: BPF prog-id=142 op=UNLOAD Oct 2 22:10:53.139000 audit: BPF prog-id=141 op=UNLOAD Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 22:10:53.139000 audit: BPF prog-id=143 op=LOAD Oct 2 22:10:53.139000 audit[3823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2191 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 22:10:53.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336643865323635653631376366326562353332343965313631356534 Oct 2 22:10:53.166530 env[1354]: time="2023-10-02T22:10:53.166470634Z" level=info msg="StartContainer for \"36d8e265e617cf2eb53249e1615e49953188ed09451d9c531b3dca8a7748645a\" returns successfully" Oct 2 22:10:54.911282 kubelet[2452]: E1002 22:10:54.910879 2452 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"kube-apiserver-ci-3510.3.0-a-176754823f.178a69e595d05226", GenerateName:"", Namespace:"kube-system", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Pod", Namespace:"kube-system", Name:"kube-apiserver-ci-3510.3.0-a-176754823f", UID:"6031d0146a1b80f8ad4b14ba614cc57c", APIVersion:"v1", ResourceVersion:"", FieldPath:"spec.containers{kube-apiserver}"}, Reason:"Unhealthy", Message:"Readiness probe failed: HTTP probe failed with statuscode: 500", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-176754823f"}, FirstTimestamp:time.Date(2023, time.October, 2, 22, 10, 44, 440298022, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 22, 10, 44, 440298022, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.17:49482->10.200.20.13:2379: read: connection timed out' (will not retry!) Oct 2 22:10:57.311463 kubelet[2452]: E1002 22:10:57.311425 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:11:01.502940 kubelet[2452]: I1002 22:11:01.502903 2452 status_manager.go:809] "Failed to get status for pod" podUID=22b0524d5531b74f7af3bbb7d2d62be1 pod="kube-system/kube-controller-manager-ci-3510.3.0-a-176754823f" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.20.17:49586->10.200.20.13:2379: read: connection timed out" Oct 2 22:11:02.034602 kubelet[2452]: E1002 22:11:02.034544 2452 controller.go:193] "Failed to update lease" err="Put \"https://10.200.20.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-176754823f?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 22:11:02.312812 kubelet[2452]: E1002 22:11:02.312721 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:11:07.313587 kubelet[2452]: E1002 22:11:07.313548 2452 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 22:11:08.807000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:11:08.813576 kernel: kauditd_printk_skb: 114 callbacks suppressed Oct 2 22:11:08.813693 kernel: audit: type=1400 audit(1696284668.807:1461): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=521004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:11:08.807000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4011029f20 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:11:08.863333 kernel: audit: type=1300 audit(1696284668.807:1461): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4011029f20 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:11:08.807000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:11:08.887929 kernel: audit: type=1327 audit(1696284668.807:1461): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:11:08.888009 kernel: audit: type=1400 audit(1696284668.817:1462): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:11:08.817000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:11:08.817000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40118f9180 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:11:08.937011 kernel: audit: type=1300 audit(1696284668.817:1462): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40118f9180 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:11:08.817000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:11:08.960687 kernel: audit: type=1327 audit(1696284668.817:1462): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:11:08.960789 kernel: audit: type=1400 audit(1696284668.819:1463): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:11:08.819000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:11:08.819000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400b096060 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:11:09.011415 kernel: audit: type=1300 audit(1696284668.819:1463): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400b096060 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:11:08.819000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:11:09.035816 kernel: audit: type=1327 audit(1696284668.819:1463): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:11:09.035901 kernel: audit: type=1400 audit(1696284668.839:1464): avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:11:08.839000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=521010 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:11:08.839000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=401127e600 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:11:08.839000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:11:09.074000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=520993 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:11:09.074000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40118f9320 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:11:09.074000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:11:09.074000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=521008 scontext=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 22:11:09.074000 audit[2282]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400b0962a0 a2=fc6 a3=0 items=0 ppid=2144 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c462,c966 key=(null) Oct 2 22:11:09.074000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E32302E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 22:11:12.035047 kubelet[2452]: E1002 22:11:12.035014 2452 controller.go:193] "Failed to update lease" err="Put \"https://10.200.20.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-176754823f?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 22:11:12.137391 env[1354]: time="2023-10-02T22:11:12.137186216Z" level=info msg="StopPodSandbox for \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\"" Oct 2 22:11:12.137391 env[1354]: time="2023-10-02T22:11:12.137286496Z" level=info msg="TearDown network for sandbox \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\" successfully" Oct 2 22:11:12.137391 env[1354]: time="2023-10-02T22:11:12.137329856Z" level=info msg="StopPodSandbox for \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\" returns successfully" Oct 2 22:11:12.138010 env[1354]: time="2023-10-02T22:11:12.137979897Z" level=info msg="RemovePodSandbox for \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\"" Oct 2 22:11:12.138084 env[1354]: time="2023-10-02T22:11:12.138011577Z" level=info msg="Forcibly stopping sandbox \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\"" Oct 2 22:11:12.138084 env[1354]: time="2023-10-02T22:11:12.138071897Z" level=info msg="TearDown network for sandbox \"4f3c8ccfd5c65fea35fb6f79d7cbb755d4f0031b6e57f590a638413e49aa2240\" successfully" Oct 2 22:11:12.157768 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#21 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.158071 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#22 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.158197 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#25 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.166029 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#23 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.174774 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#26 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.183385 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#24 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.191948 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#27 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.226735 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#21 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.227109 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#22 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.227220 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#25 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.235592 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#23 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.244322 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#26 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.252880 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#24 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.261192 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#27 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.295657 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#21 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.295935 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#22 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001 Oct 2 22:11:12.296067 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#25 cmd 0x2a status: scsi 0x2 srb 0x4 hv 0xc0000001